From 29bae18044826edc18e9bbfb0b47a2bbb18abf5a Mon Sep 17 00:00:00 2001 From: Mark Nipper Date: Thu, 13 Aug 2026 09:13:58 -0700 Subject: Redo VPN configuration --- hosts/arrakis/default.nix | 17 +---------------- 1 file changed, 1 insertion(+), 16 deletions(-) (limited to 'hosts/arrakis/default.nix') diff --git a/hosts/arrakis/default.nix b/hosts/arrakis/default.nix index b647b31..d44610b 100644 --- a/hosts/arrakis/default.nix +++ b/hosts/arrakis/default.nix @@ -68,22 +68,7 @@ chain output { type filter hook output priority filter; policy drop; - - # explicitly allow my DNS traffic without VPN - skuid nipsy ip daddr 192.168.1.1 tcp dport domain accept - skuid nipsy ip daddr 192.168.1.1 udp dport domain accept - - # explicitly allow my traffic without VPN - oifname veth.vpn skuid nipsy tcp sport 8080 accept # qBittorrent - oifname veth.vpn skuid nipsy tcp sport 9696 accept # Prowlarr - oifname veth.vpn skuid nipsy ip daddr 192.168.1.2 tcp dport { 7878, 8686, 8787, 8989 } accept # Prowlarr to { Radarr, Lidarr, Readarr, Sonarr } - oif lo skuid nipsy ip daddr 192.168.1.3 tcp dport 8080 accept # Prowlarr to qBittorrent - - # allow any traffic out through VPN - oifname wg1 accept - - # drop everything else - counter drop + counter accept } chain forward { -- cgit v1.3.1