From d43550acdfbe8923cc4cae5f478f14801a450c2b Mon Sep 17 00:00:00 2001 From: Ciapa Date: Sun, 4 Feb 2024 20:12:00 +0100 Subject: [PATCH] Allow all IPs for wireguard interface without routing them --- hosts/phoenix.lewd.wtf/networking.nix | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/hosts/phoenix.lewd.wtf/networking.nix b/hosts/phoenix.lewd.wtf/networking.nix index 1dcb454..947fa9f 100644 --- a/hosts/phoenix.lewd.wtf/networking.nix +++ b/hosts/phoenix.lewd.wtf/networking.nix @@ -31,12 +31,14 @@ wg0 = { ips = [ "10.175.197.82/32" "fd7d:76ee:e68f:a993:f6b2:9dab:ddd3:a02/128" ]; privateKeyFile = "/run/secrets/services/wireguard/airvpn.private"; - + + # allowedIPsAsRoutes = false; + peers = [ { publicKey = "PyLCXAQT8KkM4T+dUsOQfn+Ub3pGxfGlxkIApuig+hk="; presharedKeyFile = "/run/secrets/services/wireguard/airvpn.psk"; - allowedIPs = [ "10.128.0.1" ]; + allowedIPs = [ "10.128.0.1/32" ]; endpoint = "134.19.179.213:1637"; persistentKeepalive = 25; }