htz-cloud.wireguard: fix firewall

2023-10-16 22:26:29 +02:00 · 2023-10-16 22:26:29 +02:00 · 588f1218c2
commit 588f1218c2
parent 7a9401cd6c
1 changed files with 3 additions and 1 deletions
--- a/nodes/htz-cloud/wireguard.py
+++ b/nodes/htz-cloud/wireguard.py
@ -38,11 +38,13 @@ nodes['htz-cloud.wireguard'] = {
            },
        },
        'nftables': {
-            'input': {
+            'forward': {
                '50-router': [
                    'ct state { related, established } accept',
                    'oifname eth0 accept',
                ],
+            },
+            'input': {
                '50-wireguard': [
                    'udp dport 1194 accept',
                ],