hosts/aluminium/configuration.nix

@@ -20,21 +20,12 @@
 
   networking.hostName = "aluminium";
 
-  networking.iproute2.enable = true;
-  networking.iproute2.rttablesExtraConfig = ''
-    200 wg-clerie
-  '';
-
   petabyte.policyrouting = {
     enable = true;
     rules6 = [
-      { rule = "from 2a01:4f8:c0c:15f1::8106/128 lookup wg-clerie"; prio = 20000; }
+      { rule = "from 2a01:4f8:c0c:15f1::8106/128 lookup 200"; prio = 20000; }
       { rule = "from 2a01:4f8:c0c:15f1::8106/128 unreachable"; prio = 20001; }
     ];
-    rules4 = [
-      { rule = "from 10.20.30.106/32 lookup wg-clerie"; prio = 20000; }
-      { rule = "from 10.20.30.106/32 unreachable"; prio = 20001; }
-    ];
   };
 
 
@@ -42,7 +33,7 @@
   networking.wireguard.interfaces = {
     wg-clerie = {
       ips = [ "2a01:4f8:c0c:15f1::8106/128" "10.20.30.106/32" ];
-      table = "wg-clerie";
+      table = "200";
       peers = [
         {
           endpoint = "vpn.clerie.de:51820";

hosts/beryllium/configuration.nix

@@ -20,8 +20,6 @@
 
   networking.hostName = "beryllium";
 
-  networking.firewall.enable = false;
-
   networking.iproute2.enable = true;
   networking.iproute2.rttablesExtraConfig = ''
     200 wg-clerie