From 2a039a3b3cec97c109a2d189631fdddc438f448e Mon Sep 17 00:00:00 2001 From: Astro Date: Fri, 24 Apr 2020 20:54:50 +0200 Subject: [PATCH] dn42: fix wireguard pointopoint route --- hosts/containers/dn42/configuration.nix | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/hosts/containers/dn42/configuration.nix b/hosts/containers/dn42/configuration.nix index d93f6953..e078ffa4 100644 --- a/hosts/containers/dn42/configuration.nix +++ b/hosts/containers/dn42/configuration.nix @@ -79,8 +79,10 @@ in { builtins.mapAttrs (name: conf: { inherit (conf.wireguard) listenPort privateKey; ips = [ "${address4}/32" "${address6}/64" ]; + allowedIPsAsRoutes = false; postSetup = '' - ${pkgs.iproute}/bin/ip route add ${conf.address4}/32 dev ${name} + ${pkgs.iproute}/bin/ip addr del ${address4}/32 dev ${name} + ${pkgs.iproute}/bin/ip addr add ${address4} dev ${name} ${conf.address4}/32 ''; peers = [ ({ inherit (conf.wireguard) publicKey; @@ -89,7 +91,6 @@ in { } // (lib.optionalAttrs (conf.wireguard ? endpoint) { inherit (conf.wireguard) endpoint; })) ]; - allowedIPsAsRoutes = false; }) wireguardNeighbors; };