diff options
-rw-r--r-- | modules/yggdrasil-wg/default.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/yggdrasil-wg/default.nix b/modules/yggdrasil-wg/default.nix index 9ecbe663..60a153cf 100644 --- a/modules/yggdrasil-wg/default.nix +++ b/modules/yggdrasil-wg/default.nix | |||
@@ -87,7 +87,7 @@ in { | |||
87 | requiredBy = ["wireguard-yggdrasil.service"]; | 87 | requiredBy = ["wireguard-yggdrasil.service"]; |
88 | 88 | ||
89 | serviceConfig = { | 89 | serviceConfig = { |
90 | ExecStart = "${pkgs.udp2raw}/bin/udp2raw ${if from == hostName then "-c -l localhost:${toString (udp2rawPort + ix)} -r ${opts.endpointHost}:${toString (udp2rawPort + ix)}" else "-s -l 0.0.0.0:${toString (udp2rawPort + ix)} -r localhost:${toString listenPort}"} -k tmpkey --auth-mode hmac_sha1 --raw-mode faketcp -a"; | 90 | ExecStart = "${pkgs.udp2raw}/bin/udp2raw ${if from == hostName then "-c -l 127.0.0.1:${toString (udp2rawPort + ix)} -r ${opts.endpointHost}:${toString (udp2rawPort + ix)}" else "-s -l 0.0.0.0:${toString (udp2rawPort + ix)} -r 127.0.0.1:${toString listenPort}"} -k tmpkey --auth-mode hmac_sha1 --raw-mode faketcp -a"; |
91 | }; | 91 | }; |
92 | } else null)) hostLinks)) // { | 92 | } else null)) hostLinks)) // { |
93 | firewall.path = optionals isRouter [pkgs.procps]; | 93 | firewall.path = optionals isRouter [pkgs.procps]; |