mathieu/system-config
1
0
Fork 0
Code Issues Packages Activity Actions

Add wireguard to vyos

Browse source
This commit is contained in:
Mathieu Strypsteen 2024-07-17 19:28:08 +02:00
parent 28a3099c3c
commit b4edf617a6
Signed by: mathieu
GPG key ID: 782A42E461BC6824
3 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
desktop/etc/containers/containers.conf
View file

@ -1,2 +0,0 @@
[engine]
compression_format="zstd:chunked"

1
desktop/var/lib/flatpak/extension/org.mozilla.firefox.systemconfig/x86_64/stable/defaults/pref/config.js
View file

@ -17,6 +17,7 @@ pref("browser.urlbar.dnsResolveSingleWordsAfterSearch", 0);
pref("cookiebanners.service.mode", 1); pref("cookiebanners.service.mode", 1);
pref("cookiebanners.service.mode.privateBrowsing", 1); pref("cookiebanners.service.mode.privateBrowsing", 1);
pref("devtools.theme", "dark"); pref("devtools.theme", "dark");
pref("dom.private-attribution.submission.enabled", false);
pref("dom.security.https_only_mode", true); pref("dom.security.https_only_mode", true);
pref("extensions.getAddons.discovery.api_url", ""); pref("extensions.getAddons.discovery.api_url", "");
pref("extensions.htmlaboutaddons.recommendations.enabled", false); pref("extensions.htmlaboutaddons.recommendations.enabled", false);

4
setup-vyos.sh
View file

@ -13,6 +13,8 @@ set interfaces ethernet eth2 address 192.168.254.1/24
set interfaces ethernet eth2 address fc01::1/64 set interfaces ethernet eth2 address fc01::1/64
set interfaces ethernet eth3 address 192.168.253.1/24 set interfaces ethernet eth3 address 192.168.253.1/24
set interfaces ethernet eth3 address fc02::1/64 set interfaces ethernet eth3 address fc02::1/64
set interfaces wireguard wg0 address 10.0.0.1/24
set interfaces wireguard wg0 port 51820
set service ssh disable-password-authentication set service ssh disable-password-authentication
set service dhcp-server hostfile-update set service dhcp-server hostfile-update
@ -70,4 +72,6 @@ for i in ${firewall_types}; do
set firewall "$i" forward filter rule 5 action accept set firewall "$i" forward filter rule 5 action accept
set firewall "$i" forward filter rule 5 inbound-interface name eth3 set firewall "$i" forward filter rule 5 inbound-interface name eth3
set firewall "$i" forward filter rule 5 outbound-interface name eth2 set firewall "$i" forward filter rule 5 outbound-interface name eth2
set firewall "$i" forward filter rule 6 action accept
set firewall "$i" forward filter rule 6 inbound-interface name wg0
done done