IfState: Difference between revisions
m ifstate/netns-examples: add wireguard public keys to configuration direct instead of including files |
m ifstate/netns-examples: switch to ipv4 documentation prefixes (TEST-NET-1/2/3) |
||
| Line 102: | Line 102: | ||
# public ip addresses from your upstream provider | # public ip addresses from your upstream provider | ||
addresses = [ | addresses = [ | ||
" | "198.51.100.10/26" | ||
"2001:db8::10/64" | "2001:db8::10/64" | ||
]; | ]; | ||
| Line 114: | Line 114: | ||
{ | { | ||
to = "0.0.0.0/0"; | to = "0.0.0.0/0"; | ||
via = " | via = "198.51.100.62"; | ||
} | } | ||
{ | { | ||
| Line 134: | Line 134: | ||
# the tunnel addresses for your upstream wireguard | # the tunnel addresses for your upstream wireguard | ||
addresses = [ | addresses = [ | ||
" | "203.0.113.100/25" | ||
"2001:db8:bad:c0de::100/128" | "2001:db8:bad:c0de::100/128" | ||
]; | ]; | ||
| Line 157: | Line 157: | ||
bind_netns = "outside"; | bind_netns = "outside"; | ||
}; | }; | ||
# the tunnel addresses for your | # the tunnel addresses for your own clients | ||
addresses = [ | addresses = [ | ||
" | "203.0.113.129/25" | ||
"2001:db8: | "2001:db8:dead:beef::1/128" | ||
]; | ]; | ||
wireguard = { | wireguard = { | ||
| Line 167: | Line 167: | ||
peers."GGavg2J9HdumqCgfpFXD85GYb6T0vWmtXBVQmlj9d0w=" = { | peers."GGavg2J9HdumqCgfpFXD85GYb6T0vWmtXBVQmlj9d0w=" = { | ||
allowedips = [ | allowedips = [ | ||
" | "203.0.113.130/32" | ||
"2001:db8:dead:beef::2/128" | "2001:db8:dead:beef::2/128" | ||
]; | ]; | ||