summaryrefslogtreecommitdiff
path: root/roles/install_wireguard_vpn/templates/up.sh.j2
diff options
context:
space:
mode:
Diffstat (limited to 'roles/install_wireguard_vpn/templates/up.sh.j2')
-rw-r--r--roles/install_wireguard_vpn/templates/up.sh.j29
1 files changed, 9 insertions, 0 deletions
diff --git a/roles/install_wireguard_vpn/templates/up.sh.j2 b/roles/install_wireguard_vpn/templates/up.sh.j2
new file mode 100644
index 0000000..c57d16f
--- /dev/null
+++ b/roles/install_wireguard_vpn/templates/up.sh.j2
@@ -0,0 +1,9 @@
+#!/bin/bash
+
+ip -6 rule add iif wgmyk table ffmyk priority 10
+ip -6 rule add from {{ wireguard_vpn_client_range }} table ffmyk priority 10
+
+ip -6 rule add from all iif wgmyk type unreachable priority 200
+
+ip -6 route add {{ wireguard_vpn_client_range }} table ffmyk dev wgmyk
+systemctl restart named.service