summaryrefslogtreecommitdiff
path: root/modules/yggdrasil-wg
diff options
context:
space:
mode:
Diffstat (limited to 'modules/yggdrasil-wg')
-rw-r--r--modules/yggdrasil-wg/default.nix5
1 files changed, 3 insertions, 2 deletions
diff --git a/modules/yggdrasil-wg/default.nix b/modules/yggdrasil-wg/default.nix
index 3d9da305..316371ea 100644
--- a/modules/yggdrasil-wg/default.nix
+++ b/modules/yggdrasil-wg/default.nix
@@ -70,11 +70,12 @@ let
70 netdevConfig = { 70 netdevConfig = {
71 Name = "yggre-${other}"; 71 Name = "yggre-${other}";
72 Kind = "ip6gretap"; 72 Kind = "ip6gretap";
73 MTUBytes = toString (1280 + 32); 73 MTUBytes = toString (1280 + 58);
74 }; 74 };
75 tunnelConfig = { 75 tunnelConfig = {
76 Local = stripSubnet wgHostIPs.${hostName}; 76 Local = stripSubnet wgHostIPs.${hostName};
77 Remote = stripSubnet wgHostIPs.${other}; 77 Remote = stripSubnet wgHostIPs.${other};
78 DiscoverPathMTU = false;
78 }; 79 };
79 }; 80 };
80 linkToGreNetwork = ix: opts@{from, to, ...}: 81 linkToGreNetwork = ix: opts@{from, to, ...}:
@@ -122,7 +123,7 @@ in {
122 netdevConfig = { 123 netdevConfig = {
123 Name = "yggdrasil-wg"; 124 Name = "yggdrasil-wg";
124 Kind = "wireguard"; 125 Kind = "wireguard";
125 MTUBytes = toString (1280 + 32 + 70); 126 MTUBytes = toString (1280 + 58 + 70);
126 }; 127 };
127 wireguardConfig = { 128 wireguardConfig = {
128 PrivateKeyFile = config.sops.secrets."yggdrasil-wg.priv".path; 129 PrivateKeyFile = config.sops.secrets."yggdrasil-wg.priv".path;