From 21f47196cf2157aca43ceaf77da3e1dfa2da1e2a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20D=C3=A9siles?=
 <1536672+cdesiles@users.noreply.github.com>
Date: Fri, 19 Jun 2026 23:55:02 +0200
Subject: [PATCH] feat(net_config): support IPForward and IPMasquerade in
 network config

---
 roles/net_config/templates/systemd.network.j2 | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/roles/net_config/templates/systemd.network.j2 b/roles/net_config/templates/systemd.network.j2
index cdd9764..817e773 100644
--- a/roles/net_config/templates/systemd.network.j2
+++ b/roles/net_config/templates/systemd.network.j2
@@ -14,6 +14,12 @@ RouteMetric={{ interface.ipv4.metric }}
 {% if interface.type is defined and interface.type == 'bridge' %}
 ConfigureWithoutCarrier=yes
 {% endif %}
+{% if interface.ipv4.forward | default(false) %}
+IPForward=ipv4
+{% endif %}
+{% if interface.ipv4.masquerade | default(false) %}
+IPMasquerade=ipv4
+{% endif %}
 {% if interface.ipv4.nameservers is defined %}
 {% for dns in interface.ipv4.nameservers %}
 DNS={{ dns }}