hosts/beryllium: disable firewall

hosts/aluminium/configuration.nix

@@ -20,12 +20,21 @@
 
   networking.hostName = "aluminium";
 
+  networking.iproute2.enable = true;
+  networking.iproute2.rttablesExtraConfig = ''
+    200 wg-clerie
+  '';
+
   petabyte.policyrouting = {
     enable = true;
     rules6 = [
-      { rule = "from 2a01:4f8:c0c:15f1::8106/128 lookup 200"; prio = 20000; }
+      { rule = "from 2a01:4f8:c0c:15f1::8106/128 lookup wg-clerie"; prio = 20000; }
       { rule = "from 2a01:4f8:c0c:15f1::8106/128 unreachable"; prio = 20001; }
     ];
+    rules4 = [
+      { rule = "from 10.20.30.106/32 lookup wg-clerie"; prio = 20000; }
+      { rule = "from 10.20.30.106/32 unreachable"; prio = 20001; }
+    ];
   };
 
 
@@ -33,7 +42,7 @@
   networking.wireguard.interfaces = {
     wg-clerie = {
       ips = [ "2a01:4f8:c0c:15f1::8106/128" "10.20.30.106/32" ];
-      table = "200";
+      table = "wg-clerie";
       peers = [
         {
           endpoint = "vpn.clerie.de:51820";

hosts/beryllium/configuration.nix

@@ -20,6 +20,8 @@
 
   networking.hostName = "beryllium";
 
+  networking.firewall.enable = false;
+
   networking.iproute2.enable = true;
   networking.iproute2.rttablesExtraConfig = ''
     200 wg-clerie