Nickiel/nicks-nix-config
1
0
Fork 0
mirror of https://github.com/Nickiel12/nicks-nix-config.git synced 2024-11-24 13:45:29 -08:00
Code Issues Projects Releases Packages Wiki Activity

Compare commits

base: Nickiel:97a530c61c2d3bbb6f7f1cd1e551fe752db13810
Branches Tags
Nickiel:main
Nickiel:awesome-dev
...
compare: Nickiel:2d9584458851bf94ac897051535680cb7c1b150d
Branches Tags
Nickiel:main
Nickiel:awesome-dev

4 commits
97a530c61c ... 2d95844588

Author SHA1 Message Date
Nickiel12
2d95844588 removed old dead code 2024-01-06 21:35:06 -08:00
Nickiel12
94737eb653 removed unneeded masquerade flag 2024-01-06 21:32:51 -08:00
Nickiel12
deb57d0aaf generalized not masquerade 2024-01-06 21:23:01 -08:00
Nickiel12
fa2e3f38be working tailscale<->protonvpn configuration 2024-01-06 21:00:13 -08:00
1 changed files with 4 additions and 6 deletions
Show stats Expand all files Collapse all files

10
hosts/Alaska/modules/protonvpn.nix
View file

@ -39,16 +39,14 @@ in
type filter hook prerouting priority raw; policy accept;
# ip daddr 100.64.0.1 dport != 22 nftrace set 1;
iifname "tailscale0" ip daddr != 100.64.0.1 nftrace set 1;
# iifname "tailscale0" ip daddr != 100.64.0.1 nftrace set 1;
iifname "tailscale0" ip daddr != 100.64.0.0/16 mark set 51820;
iifname "protonvpn" mark set 51820;
}
chain postrouting {
type nat hook postrouting priority srcnat; policy accept;
iifname "tailscale0" ip daddr != 100.64.0.1 masquerade;
}
}
EOF
${pkgs.wireguard-tools}/bin/wg set protonvpn fwmark off
# table inet tailscale-wg { for ipv4 + ipv6
${pkgs.iproute2}/bin/ip -4 rule del not fwmark 51820 table 51820
# ${pkgs.iproute2}/bin/ip -6 rule del not fwmark 51820 table 51820