Fix dnsmasq

This commit is contained in:
mups 2024-09-20 15:00:45 +00:00
parent 3fb3df6f59
commit d8893f8209

View file

@ -6,9 +6,8 @@
}; };
}; };
config = lib.mkIf config.mods.server.wireguard.enable { config = lib.mkIf config.mods.server.wireguard.enable {
networking.nat = { networking.nat = {
enable = true; enable = true;
enableIPv6 = true; enableIPv6 = true;
externalInterface = "ens3"; externalInterface = "ens3";
@ -45,22 +44,23 @@
${pkgs.iptables}/bin/ip6tables -t nat -D POSTROUTING -s fdc9:281f:04d7:9ee9::1/64 -o ens3 -j MASQUERADE ${pkgs.iptables}/bin/ip6tables -t nat -D POSTROUTING -s fdc9:281f:04d7:9ee9::1/64 -o ens3 -j MASQUERADE
''; '';
peers = [ peers = [{ # peer0
{ # peer0 publicKey = "MDBdADwP/SE/T9cadXB1Mup7Dr3x+l6gBFBN83BU4Dg=";
publicKey = "MDBdADwP/SE/T9cadXB1Mup7Dr3x+l6gBFBN83BU4Dg="; presharedKeyFile = "/home/muon/wireguard-keys/psk-muon";
presharedKeyFile = "/home/muon/wireguard-keys/psk-muon"; allowedIPs = [ "10.0.0.2/32" "fdc9:281f:04d7:9ee9::2/128" ];
allowedIPs = [ "10.0.0.2/32" "fdc9:281f:04d7:9ee9::2/128" ]; }
} # More peers can be added here.
# More peers can be added here. ];
];
}; };
}; };
services.dnsmasq = { services.dnsmasq = {
enable = true; enable = true;
extraConfig = '' settings.bind-interfaces = true;
interface=wg0 settings.interface = "wg0";
''; # extraConfig = ''
# interface=wg0
# '';
}; };
# networking.wireguard.interfaces = { # networking.wireguard.interfaces = {