mikl/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

heather: allow MatrixRTC Docker subnet to use AstrNet egress NAT

Browse source
This commit is contained in:
heather 2026-11-05 20:42:25 +00:00
commit 56120933f3
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hosts/heather/astrnet.nix
View file

@ -125,7 +125,7 @@ in {
type nat hook postrouting priority 99; policy accept; type nat hook postrouting priority 99; policy accept;
# Docker's own MASQUERADE would use the tunnel transit IP, which # Docker's own MASQUERADE would use the tunnel transit IP, which
# AstrNet exits do not NAT. Use the advertised mesh identity instead. # AstrNet exits do not NAT. Use the advertised mesh identity instead.
oifname { "wg-mic-der", "wg-mic-bd8" } ip saddr { 172.17.0.0/16, 172.18.0.0/16, 172.19.0.0/16 } snat to ${id4} oifname { "wg-mic-der", "wg-mic-bd8" } ip saddr { 172.17.0.0/16, 172.18.0.0/16, 172.19.0.0/16, 172.21.0.0/16 } snat to ${id4}
} }
} }
RULES RULES