Maurice/alpine-server-setup
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Getting started with NFTables - long way to go

Browse Source
This commit is contained in:
Maurice
2025-09-29 15:52:06 +02:00
parent aea521cba4
commit 20dd97aafa
8 changed files with 92 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
services/wireguard/install.sh
View File

@@ -12,8 +12,8 @@ cat <<EOF > /etc/wireguard/wg0.conf
PrivateKey = $(cat /etc/wireguard/server_priv.key)
Address = 10.0.0.1/24 # Server has IP in the wg network
ListenPort = 51820
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
#PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
#PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
EOF
# Enable IP forwarding, persistent

1
services/wireguard/vpn_traffic.policy.json
View File

@@ -3,7 +3,6 @@
"filter": [
{
"in": "VPN",
"out": "_fw",
"service": [ "ssh", "dns", "ping", "http", "https" ],
"action": "accept",
"src": "10.0.0.1/24"