mirror of
https://github.com/oddlama/nix-config.git
synced 2025-10-11 07:10:39 +02:00
feat: add proxy-home vpn to accelerate traffic between local nodes
This commit is contained in:
parent
34fd783e60
commit
b01c521830
22 changed files with 123 additions and 10 deletions
|
@ -111,6 +111,20 @@ in {
|
|||
verdict = "accept";
|
||||
};
|
||||
|
||||
lan-to-local = {
|
||||
from = ["lan"];
|
||||
to = ["local"];
|
||||
|
||||
allowedUDPPorts = [config.wireguard.proxy-home.server.port];
|
||||
};
|
||||
|
||||
# Forward traffic between participants
|
||||
forward-proxy-home-vpn-traffic = {
|
||||
from = ["proxy-home"];
|
||||
to = ["proxy-home"];
|
||||
verdict = "accept";
|
||||
};
|
||||
|
||||
#masquerade-vpn = {
|
||||
# from = ["wg-home"];
|
||||
# to = ["lan"];
|
||||
|
@ -135,4 +149,11 @@ in {
|
|||
# reservedAddresses = ["10.10.0.1/24" "fd00:10::/120"];
|
||||
# openFirewall = true;
|
||||
#};
|
||||
|
||||
wireguard.proxy-home.server = {
|
||||
host = "192.168.1.1";
|
||||
port = 51444;
|
||||
reservedAddresses = ["10.44.0.0/24" "fd00:44::/120"];
|
||||
openFirewall = false; # Explicitly opened only for lan
|
||||
};
|
||||
}
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue