Maurice/alpine-server-setup
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Nftables to go

Browse Source
This commit is contained in:
Maurice
2025-09-29 19:53:24 +02:00
parent b6e9bb6d81
commit 054ec35a98
10 changed files with 45 additions and 93 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
services/wireguard/install.sh
View File

@@ -12,8 +12,6 @@ cat <<EOF > /etc/wireguard/wg0.conf
PrivateKey = $(cat /etc/wireguard/server_priv.key)
Address = 10.0.0.1/24 # Server has IP in the wg network
ListenPort = 51820
#PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
#PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
EOF
# Enable IP forwarding, persistent

11
services/wireguard/vpn_traffic.policy.json
View File

@@ -1,11 +0,0 @@
{
"description": "Allow VPN traffic through Wireguard interface",
"filter": [
{
"in": "VPN",
"service": [ "ssh", "dns", "ping", "http", "https" ],
"action": "accept",
"src": "10.0.0.1/24"
}
]
}

14
services/wireguard/wireguard.policy.json
View File

@@ -1,14 +0,0 @@
{
"description": "Allow Wireguard server access from the internet",
"service": {
"wireguard": { "port": 51820, "proto": "udp" }
},
"filter": [
{
"in": "WAN",
"out": "_fw",
"service": "wireguard",
"action": "accept"
}
]
}