htz-cloud.wireguard: add IPv4 NAT

2023-09-09 22:46:09 +02:00 · 2023-09-09 22:46:09 +02:00 · 7845faeac3
commit 7845faeac3
parent 5238937044
1 changed files with 9 additions and 0 deletions
--- a/nodes/htz-cloud/wireguard.py
+++ b/nodes/htz-cloud/wireguard.py
@ -36,6 +36,15 @@ nodes['htz-cloud.wireguard'] = {
                '172.19.137.0/24',
            },
        },
+        'nftables': {
+            'rules': {
+                '50-router': [
+                    'inet filter forward ct state { related, established } accept',
+                    'inet filter forward oif eth0 accept',
+                    'nat postrouting oif eth0 masquerade',
+                ],
+            },
+        },
        'vm': {
            'cpu': 1,
            'ram': 2,