From 2810d4d54cbecb2e8e2dcd4971c115b931bd5050 Mon Sep 17 00:00:00 2001
From: arcnmx <git@git.arcn.mx>
Date: Fri, 1 Mar 2024 15:19:23 -0800
Subject: [PATCH] fix(nixos): ping_group_range

cloudflared in particular likes having this...
---
 nixos/reisen-ct/network.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/nixos/reisen-ct/network.nix b/nixos/reisen-ct/network.nix
index 0f444edc..7f70a392 100644
--- a/nixos/reisen-ct/network.nix
+++ b/nixos/reisen-ct/network.nix
@@ -24,4 +24,9 @@ in {
     linkConfig.Multicast = true;
     networkConfig.MulticastDNS = true;
   };
+
+  boot.kernel.sysctl = {
+    # not sure how to get it to overlap with subgid/idmap...
+    "net.ipv4.ping_group_range" = "0 7999";
+  };
 }