diff --git a/hosts/server/configuration.nix b/hosts/server/configuration.nix index dda80d9..3b1fa4f 100644 --- a/hosts/server/configuration.nix +++ b/hosts/server/configuration.nix @@ -78,6 +78,7 @@ in endpoint = "${config.my.ips.vps}:51820"; allowedIPs = [ "${config.my.ips.wg-vps}/32" + config.my.subnets.wg-homelab config.my.subnets.wg-friends config.my.subnets.wg-guests ]; diff --git a/hosts/vps/configuration.nix b/hosts/vps/configuration.nix index b3a3290..9cc6a14 100644 --- a/hosts/vps/configuration.nix +++ b/hosts/vps/configuration.nix @@ -106,6 +106,8 @@ in iifname "${wgInterface}" ip saddr ${ips.wgGuest2}/32 ip daddr ${ips.homeServer}/32 tcp dport ${portsStr.stash} accept iifname "${wgInterface}" ip saddr ${subnets.wgGuests} ip daddr ${ips.homeServer}/32 icmp type echo-request accept + iifname "${wgInterface}" ip saddr ${subnets.wgHomelab} ip daddr ${ips.homeServer}/32 accept + iifname "${wgInterface}" ip saddr ${subnets.wgFriends} oifname "${externalInterface}" accept iifname "${wgInterface}" ip saddr ${subnets.wgGuests} oifname "${externalInterface}" accept