diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2021-10-10 13:17:59 +0200 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2021-10-10 13:17:59 +0200 |
| commit | 4afbcba9e3e591cf60ad17c1fe42682434d6cf4b (patch) | |
| tree | 536af8eca43efd93731c86f679f384b36e3e58bd /modules/yggdrasil-wg | |
| parent | 352d9aab099ea7367066c290df45e45e59932b00 (diff) | |
| download | nixos-4afbcba9e3e591cf60ad17c1fe42682434d6cf4b.tar nixos-4afbcba9e3e591cf60ad17c1fe42682434d6cf4b.tar.gz nixos-4afbcba9e3e591cf60ad17c1fe42682434d6cf4b.tar.bz2 nixos-4afbcba9e3e591cf60ad17c1fe42682434d6cf4b.tar.xz nixos-4afbcba9e3e591cf60ad17c1fe42682434d6cf4b.zip | |
yggdrasil-wg: ...
Diffstat (limited to 'modules/yggdrasil-wg')
| -rw-r--r-- | modules/yggdrasil-wg/default.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/yggdrasil-wg/default.nix b/modules/yggdrasil-wg/default.nix index 9ecbe663..60a153cf 100644 --- a/modules/yggdrasil-wg/default.nix +++ b/modules/yggdrasil-wg/default.nix | |||
| @@ -87,7 +87,7 @@ in { | |||
| 87 | requiredBy = ["wireguard-yggdrasil.service"]; | 87 | requiredBy = ["wireguard-yggdrasil.service"]; |
| 88 | 88 | ||
| 89 | serviceConfig = { | 89 | serviceConfig = { |
| 90 | ExecStart = "${pkgs.udp2raw}/bin/udp2raw ${if from == hostName then "-c -l localhost:${toString (udp2rawPort + ix)} -r ${opts.endpointHost}:${toString (udp2rawPort + ix)}" else "-s -l 0.0.0.0:${toString (udp2rawPort + ix)} -r localhost:${toString listenPort}"} -k tmpkey --auth-mode hmac_sha1 --raw-mode faketcp -a"; | 90 | ExecStart = "${pkgs.udp2raw}/bin/udp2raw ${if from == hostName then "-c -l 127.0.0.1:${toString (udp2rawPort + ix)} -r ${opts.endpointHost}:${toString (udp2rawPort + ix)}" else "-s -l 0.0.0.0:${toString (udp2rawPort + ix)} -r 127.0.0.1:${toString listenPort}"} -k tmpkey --auth-mode hmac_sha1 --raw-mode faketcp -a"; |
| 91 | }; | 91 | }; |
| 92 | } else null)) hostLinks)) // { | 92 | } else null)) hostLinks)) // { |
| 93 | firewall.path = optionals isRouter [pkgs.procps]; | 93 | firewall.path = optionals isRouter [pkgs.procps]; |