From 7b341572784bbe1fe59c6e75482e952a9527d446 Mon Sep 17 00:00:00 2001 From: clerie Date: Tue, 8 Dec 2020 18:51:58 +0100 Subject: [PATCH] Fix wireguard to work with link local addr --- hosts/dn42-il-gw1/configuration.nix | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/hosts/dn42-il-gw1/configuration.nix b/hosts/dn42-il-gw1/configuration.nix index a294cc5..c229d16 100644 --- a/hosts/dn42-il-gw1/configuration.nix +++ b/hosts/dn42-il-gw1/configuration.nix @@ -37,6 +37,10 @@ "fe80::42:1/128" # peer fe80::42:42:1/128 ]; + postSetup = '' + ip -6 route flush dev %i + ip addr del dev %i fe80::42:1/128 && ip addr add dev %i fe80::42:1/128 peer fe80::42:42:1/128 + ''; listenPort = 50197; allowedIPsAsRoutes = false; peers = [ @@ -54,6 +58,10 @@ "fe80::43:43:1/128" # peer fe80::43:1/128 ]; + postSetup = '' + ip -6 route flush dev %i + ip addr del dev %i fe80::43:43:1/128 && ip addr add dev %i fe80::43:43:1/128 peer fe80::43:1/128 + ''; listenPort = 50565; allowedIPsAsRoutes = false; peers = [ @@ -71,6 +79,10 @@ "fe80::1/128" # peer fe80::2/128 ]; + postSetup = '' + ip -6 route flush dev %i + ip addr del dev %i fe80::1/128 && ip addr add dev %i fe80::1/128 peer fe80::2/128 + ''; listenPort = 51271; allowedIPsAsRoutes = false; peers = [ @@ -87,6 +99,10 @@ "fe80::1:1/128" # peer fe80::1:2/128 ]; + postSetup = '' + ip -6 route flush dev %i + ip addr del dev %i fe80::1:1/128 && ip addr add dev %i fe80::1:1/128 peer fe80::1:2/128 + ''; listenPort = 51272; allowedIPsAsRoutes = false; peers = [