From 68317127ba31eb957303af72a8169edc6245ff55 Mon Sep 17 00:00:00 2001
From: fen <fen@archfox.org>
Date: Wed, 9 Sep 2026 20:29:43 -0500
Subject: [PATCH] goyplex-vm: disable k3s network-policy controller
 (kube-router fwmark 0x20000 collides with netbird routing-peer mark 0x1bd20;
 no NetworkPolicies in use)

---
 modules/k3s/k3s.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/k3s/k3s.nix b/modules/k3s/k3s.nix
index d5310cc..eca8a23 100644
--- a/modules/k3s/k3s.nix
+++ b/modules/k3s/k3s.nix
@@ -11,7 +11,7 @@
   services.k3s = {
     enable = true;
     role = "server";
-    extraFlags = "--write-kubeconfig-mode 644";
+    extraFlags = "--write-kubeconfig-mode 644 --disable-network-policy";
   };
 
   fileSystems."/var/lib/rancher/k3s/server/manifests/apps" = {