diff options
| author | Mark Nipper <nipsy@bitgnome.net> | 2026-08-13 09:13:58 -0700 |
|---|---|---|
| committer | Mark Nipper <nipsy@bitgnome.net> | 2026-08-13 09:13:58 -0700 |
| commit | 29bae18044826edc18e9bbfb0b47a2bbb18abf5a (patch) | |
| tree | 25bfba50dd23760052b33408b376d45d2735c7de /hosts/arrakis/default.nix | |
| parent | 8aaa9a99c3fac71adf30ff38961e6f407b15d316 (diff) | |
| download | nix-29bae18044826edc18e9bbfb0b47a2bbb18abf5a.tar nix-29bae18044826edc18e9bbfb0b47a2bbb18abf5a.tar.gz nix-29bae18044826edc18e9bbfb0b47a2bbb18abf5a.tar.bz2 nix-29bae18044826edc18e9bbfb0b47a2bbb18abf5a.tar.lz nix-29bae18044826edc18e9bbfb0b47a2bbb18abf5a.tar.xz nix-29bae18044826edc18e9bbfb0b47a2bbb18abf5a.tar.zst nix-29bae18044826edc18e9bbfb0b47a2bbb18abf5a.zip | |
Redo VPN configuration
Diffstat (limited to 'hosts/arrakis/default.nix')
| -rw-r--r-- | hosts/arrakis/default.nix | 17 |
1 files changed, 1 insertions, 16 deletions
diff --git a/hosts/arrakis/default.nix b/hosts/arrakis/default.nix index b647b31..d44610b 100644 --- a/hosts/arrakis/default.nix +++ b/hosts/arrakis/default.nix @@ -68,22 +68,7 @@ chain output { type filter hook output priority filter; policy drop; - - # explicitly allow my DNS traffic without VPN - skuid nipsy ip daddr 192.168.1.1 tcp dport domain accept - skuid nipsy ip daddr 192.168.1.1 udp dport domain accept - - # explicitly allow my traffic without VPN - oifname veth.vpn skuid nipsy tcp sport 8080 accept # qBittorrent - oifname veth.vpn skuid nipsy tcp sport 9696 accept # Prowlarr - oifname veth.vpn skuid nipsy ip daddr 192.168.1.2 tcp dport { 7878, 8686, 8787, 8989 } accept # Prowlarr to { Radarr, Lidarr, Readarr, Sonarr } - oif lo skuid nipsy ip daddr 192.168.1.3 tcp dport 8080 accept # Prowlarr to qBittorrent - - # allow any traffic out through VPN - oifname wg1 accept - - # drop everything else - counter drop + counter accept } chain forward { |