palo/nixos-config
palo/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

🐛 fix wireguard forwarding

Browse source
This commit is contained in:
Ingolf Wagner 2025-02-16 16:26:18 +13:00
parent f721410bdd
commit 3aacad45f3
No known key found for this signature in database
GPG key ID: 76BF5F1928B9618B
2 changed files with 4 additions and 1 deletions

3
machines/orbi/configuration.nix
View file

@ -56,8 +56,11 @@
components.network.enable = true;
components.network.nginx.landingpage.enable = false;
components.network.wifi.enable = false;
components.virtualisation.enable = true; # we only enable this stuff where we need it explicitly
components.virtualisation.podman.enable = false;
components.virtualisation.virtualbox.enable = false;
virtualisation.oci-containers.backend = "docker";
features.network.fail2ban.enable = true;

2
machines/orbi/network-wireguard.nix
View file

@ -31,7 +31,7 @@ in
ping -c 1 -W 5 ${config.clan.core.facts.services.wireguard_ip.public."wireguard.wg0.ip".value}
'';
boot.kernel.sysctl."net.ipv4.ip_forward" = true;
boot.kernel.sysctl."net.ipv4.conf.wg0.forwarding" = true;
# Enable WireGuard
networking.wg-quick.interfaces = {