diff options
| author | makefu <github@syntax-fehler.de> | 2022-06-07 00:17:23 +0200 |
|---|---|---|
| committer | makefu <github@syntax-fehler.de> | 2022-06-07 00:17:23 +0200 |
| commit | 9c1799914a2e6f2dc736fe2eaad7134602a3d837 (patch) | |
| tree | 08347f7f29bc00c3b40be2a49e069268c0163716 /lass/2configs/wiregrill.nix | |
| parent | 1e405be047a79e1abd0c28e52b5009b9675909b8 (diff) | |
| parent | bdc80e55411e197f89990e988f8b7e67c084d3d3 (diff) | |
Merge remote-tracking branch 'lass/master' into 22.05
Diffstat (limited to 'lass/2configs/wiregrill.nix')
| -rw-r--r-- | lass/2configs/wiregrill.nix | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/lass/2configs/wiregrill.nix b/lass/2configs/wiregrill.nix index 0183bd4e..54257d2c 100644 --- a/lass/2configs/wiregrill.nix +++ b/lass/2configs/wiregrill.nix @@ -18,6 +18,10 @@ in mkIf (hasAttr "wiregrill" config.krebs.build.host.nets) { ]; krebs.iptables.tables.filter.FORWARD.rules = mkIf isRouter [ { precedence = 1000; predicate = "-i wiregrill -o wiregrill"; target = "ACCEPT"; } + { precedence = 1000; predicate = "-i wiregrill -o retiolum"; target = "ACCEPT"; } + { precedence = 1000; predicate = "-i retiolum -o wiregrill"; target = "ACCEPT"; } + { precedence = 1000; predicate = "-i wiregrill -o eth0"; target = "ACCEPT"; } + { precedence = 1000; predicate = "-o wiregrill -m conntrack --ctstate RELATED,ESTABLISHED"; target = "ACCEPT"; } ]; networking.wireguard.interfaces.wiregrill = { |