Update

install.sh

@@ -14,7 +14,6 @@ base_dir=$(pwd)
 cd ./installation
 source ./basic.sh
 source ./podman.sh
-source ./firewall.sh
 
 cd "$base_dir"
 

services/firewall/install.sh

@@ -5,7 +5,7 @@ apk add -u awall # important -u flag!
 apk add ip6tables iptables
 modprobe -v ip_tables
 modprobe -v ip6_tables
-modprobe -v iptable_nat #if NAT is used
+#modprobe -v iptable_nat #if NAT is used
 
 # Register services
 rc-update add iptables

services/wireguard/vpn_traffic.policy.json

@@ -0,0 +1,12 @@
+{
+    "description": "Allow VPN traffic through Wireguard interface",
+    "filter": [
+        {
+            "in": "VPN",
+            "out": "_fw",
+            "service": [ "ssh", "dns", "ping", "http", "https" ],
+            "action": "accept",
+            "src": "10.0.0.1/24"
+        }
+    ]
+}

update.sh

@@ -24,8 +24,8 @@ for service in "./services"/*/; do
   for policy in *.policy.json; do
     [ -e "$policy" ] || continue
     POLICY_NAME="${policy%.policy.json}"
-    ln -sf "./$policy" "/etc/awall/optional/$POLICY_NAME.policy.json"
-    awall enable "$POLICY_NAME.policy"
+    ln -sf "./$policy" "/etc/awall/optional/$POLICY_NAME.json"
+    awall enable "$POLICY_NAME"
   done
 
   cd "$base_dir"