aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/roles/wireguard/templates
diff options
context:
space:
mode:
authorEgor Tensin <Egor.Tensin@gmail.com>2023-08-24 00:08:18 +0200
committerEgor Tensin <Egor.Tensin@gmail.com>2023-08-24 00:08:18 +0200
commitdf1fe00b6cb85de2b543fe9e7318f1d28bba09ec (patch)
treec19acb9c2dfcde5184d74874defb1050b07809d5 /roles/wireguard/templates
parentv0.0.20 (diff)
downloadinfra-ansible-df1fe00b6cb85de2b543fe9e7318f1d28bba09ec.tar.gz
infra-ansible-df1fe00b6cb85de2b543fe9e7318f1d28bba09ec.zip
wireguard: wg_firewall -> wg_router
Diffstat (limited to '')
-rw-r--r--roles/wireguard/templates/wg0.conf.j22
1 files changed, 1 insertions, 1 deletions
diff --git a/roles/wireguard/templates/wg0.conf.j2 b/roles/wireguard/templates/wg0.conf.j2
index fca9a0b..7dae2ff 100644
--- a/roles/wireguard/templates/wg0.conf.j2
+++ b/roles/wireguard/templates/wg0.conf.j2
@@ -6,7 +6,7 @@ Address = {{ wg_addr4 }}, {{ wg_addr6 }}
ListenPort = {{ wg_listen_port }}
SaveConfig = false
-{% if wg_firewall %}
+{% if wg_router %}
PostUp = iptables -t nat -A POSTROUTING -s {{ wg_addr4 }} -m policy --pol none --dir out -j MASQUERADE
PostUp = iptables -A FORWARD -s {{ wg_addr4 }} -j ACCEPT
PostUp = ip6tables -t nat -A POSTROUTING -s {{ wg_addr6 }} -m policy --pol none --dir out -j MASQUERADE