htz-cloud.wireguard: fix firewall

This commit is contained in:
Franzi 2023-10-16 22:26:29 +02:00
parent 7a9401cd6c
commit 588f1218c2
Signed by: kunsi
GPG key ID: 12E3D2136B818350

View file

@ -38,11 +38,13 @@ nodes['htz-cloud.wireguard'] = {
}, },
}, },
'nftables': { 'nftables': {
'input': { 'forward': {
'50-router': [ '50-router': [
'ct state { related, established } accept', 'ct state { related, established } accept',
'oifname eth0 accept', 'oifname eth0 accept',
], ],
},
'input': {
'50-wireguard': [ '50-wireguard': [
'udp dport 1194 accept', 'udp dport 1194 accept',
], ],