1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-11 07:10:39 +02:00

feat: implement cidr coersion to automatically determine wireguard network size from participants

This commit is contained in:
oddlama 2023-05-20 15:57:19 +02:00
parent 6d8f8ab2e3
commit 4057ee9051
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
14 changed files with 240 additions and 29 deletions

View file

@ -0,0 +1 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBXXjI6uB26xOF0DPy/QyLladoGIKfAtofyqPgIkCH/g

View file

@ -93,6 +93,7 @@ in {
};
};
# TODO mkForce nftables
networking.nftables.firewall = {
zones = lib.mkForce {
lan.interfaces = ["lan-self"];
@ -188,5 +189,6 @@ in {
baseCidrv4 = lanCidrv4;
baseCidrv6 = lanCidrv6;
};
wireguard.openFirewallRules = ["lan-to-local"];
};
}