Maybe unfinished support for wireguard Nix clients

This commit is contained in:
jimjam4real 2024-09-23 13:49:48 -04:00
parent 8a27361843
commit 040d7392dc
5 changed files with 40 additions and 10 deletions

View file

@ -1,11 +1,13 @@
{
let
ips = import ../modules/ips.nix;
in {
# Networking settings
networking = {
# Enable firewall
firewall = {
allowPing = false;
extraInputRules = ''
ip saddr 10.0.0.2 accept comment "Accept Server Connections"
ip saddr { ${ips.server}, ${ips.wgSpan}.1 } accept comment "Accept Server"
'';
};
};