From 85db8852793af6a2d20d281aec768597b027a619 Mon Sep 17 00:00:00 2001 From: lassulus Date: Sun, 29 May 2022 20:13:53 +0200 Subject: l wiregrill: allow retiolum <-> wiregrill --- lass/2configs/wiregrill.nix | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/lass/2configs/wiregrill.nix b/lass/2configs/wiregrill.nix index 0183bd4e..54257d2c 100644 --- a/lass/2configs/wiregrill.nix +++ b/lass/2configs/wiregrill.nix @@ -18,6 +18,10 @@ in mkIf (hasAttr "wiregrill" config.krebs.build.host.nets) { ]; krebs.iptables.tables.filter.FORWARD.rules = mkIf isRouter [ { precedence = 1000; predicate = "-i wiregrill -o wiregrill"; target = "ACCEPT"; } + { precedence = 1000; predicate = "-i wiregrill -o retiolum"; target = "ACCEPT"; } + { precedence = 1000; predicate = "-i retiolum -o wiregrill"; target = "ACCEPT"; } + { precedence = 1000; predicate = "-i wiregrill -o eth0"; target = "ACCEPT"; } + { precedence = 1000; predicate = "-o wiregrill -m conntrack --ctstate RELATED,ESTABLISHED"; target = "ACCEPT"; } ]; networking.wireguard.interfaces.wiregrill = { -- cgit v1.2.3