fix

networking/default.nix

@@ -29,7 +29,6 @@
 
         dhcpcd = {
             enable = true;
-            runHook = "systemctl restart nftables.service";
             allowInterfaces = [ "ppp0" ];
             extraConfig = ''
                 # don't touch our DNS settings

networking/firewall.nft

@@ -58,6 +58,6 @@ table ip clash {
 
     chain divert {
         type filter hook prerouting priority mangle; policy accept;
-        ip protocol tcp socket transparent 1 meta mark set 0x233 accept
+        ip protocol tcp socket transparent 1 meta mark set 0x233 counter accept
     }
 }

networking/upnp.nix

@@ -3,7 +3,7 @@
     services.miniupnpd = {
         enable = true;
         natpmp = true;
-        externalInterface = "wan";
+        externalInterface = "ppp0";
         internalIPs = [ "lan" ];
     };
 }

patches/nft.patch

@@ -16,7 +16,7 @@ index 424d005dc0b5ef..357db2c10352a0 100644
      systemd.services.nftables = {
        description = "nftables firewall";
 -      before = [ "network-pre.target" ];
-+      after = [ "network-pre.target" ];
++      after = [ "network.target" ];
        wants = [ "network-pre.target" ];
        wantedBy = [ "multi-user.target" ];
        reloadIfChanged = true;