mikl/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(mesh): refresh egress DNS with getent and route clients

Browse source
This commit is contained in:
mikl 2026-08-03 08:55:11 +03:00
parent ab718ac336
commit 252d082c37
2 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
hosts/heather/mesh-clients.nix
View file

@ -20,6 +20,12 @@
networking.firewall.allowedUDPPorts = [ 51821 ]; networking.firewall.allowedUDPPorts = [ 51821 ];
# allowedIPsAsRoutes=false keeps peer declarations as crypto ACLs; install
# the client identity route explicitly, as in the backbone design.
networking.interfaces.wg-clients1.ipv4.routes = [
{ address = "10.0.1.10"; prefixLength = 32; }
];
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d /var/lib/wireguard 0700 root root -" "d /var/lib/wireguard 0700 root root -"
]; ];

2
hosts/heather/mesh-egress.nix
View file

@ -4,7 +4,7 @@
{ config, pkgs, ... }: { config, pkgs, ... }:
let let
ip = "${pkgs.iproute2}/bin/ip"; ip = "${pkgs.iproute2}/bin/ip";
getent = "${pkgs.glibc}/bin/getent"; getent = "${pkgs.getent}/bin/getent";
routeScript = pkgs.writeShellScript "mesh-egress-routes" '' routeScript = pkgs.writeShellScript "mesh-egress-routes" ''
set -eu set -eu
${ip} link show wg-mesh >/dev/null ${ip} link show wg-mesh >/dev/null