ansible/router
ansible/router
2
0
Fork 0
Code Issues 1 Pull requests Activity

feat: simplify wireguard-exit node

Browse source
This commit is contained in:
Simon Cornet 2026-02-17 14:09:41 +01:00
commit 55395d537b
1 changed files with 2 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

9
templates/nftables.nft.j2
View file

@ -55,13 +55,8 @@ table ip nat {
chain postrouting {
type nat hook postrouting priority 100; policy accept;
# nat masquerade from lan to wan
iif {{ lan_interface }} oif {{ wan_interface }} masquerade
{% if wireguard_enabled %}
# nat mascerade from wireguard to wan (exit node)
iifname "wt*" oif {{ wan_interface }} masquerade
{% endif %}
# nat masquerade from any to wan
oif {{ wan_interface }} masquerade
}
chain prerouting {