diff --git a/hosts/sigma/network.nix b/hosts/sigma/network.nix index 4f0a187..c200e7c 100644 --- a/hosts/sigma/network.nix +++ b/hosts/sigma/network.nix @@ -57,6 +57,16 @@ Table = "wg-sigma-public"; }; } + { + # Allow hosts on the local network to contact us directly on the + # public address instead of routing the packet through Wireguard and + # back again. + routingPolicyRuleConfig = { + From = "49.13.33.75/32"; + To = "192.168.0.0/24"; + Table = "main"; + }; + } { # The postfix systemd service has # RestrictNetworkInterfaces=wg-sigma-public, but that does not tell