simon/nixos-config
simon/nixos-config
1
1
Fork 0
Code Issues 8 Pull requests Actions Projects Activity

Make routing all traffic over wireguard tunnel work

Browse source 
Fixes #26 (regression introduced in
126a0dad4b)

This is not an ideal solution, since it disables some features of the
firewall. Ideally, the mullvad configuration would be declaratively
managed and include a PostUp and PreDown command that adds routes to the
tunnel endpoint to the physical interface.
This commit is contained in:
Simon Bruder 2021-01-24 14:44:00 +01:00
parent bcbd5e772a
commit 603a006df8
Signed by: simon
GPG key ID: 8D3C82F9F309F8EC
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
modules/default.nix
View file

@ -99,6 +99,10 @@ in
# NixOS state version (see https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion) # NixOS state version (see https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion)
system.stateVersion = "20.03"; system.stateVersion = "20.03";
# When this is set to true (default), routing everything through a
# wireguard tunnel does not work.
networking.firewall.checkReversePath = "loose";
nix = { nix = {
nixPath = [ nixPath = [
"/var/src" # pinned nixpkgs and configuration "/var/src" # pinned nixpkgs and configuration