From 18064e21c06ee707eb8d20b4fd21a9f89bf64d72 Mon Sep 17 00:00:00 2001
From: Timotej Lazar <timotej.lazar@fri.uni-lj.si>
Date: Fri, 18 Jul 2025 18:39:01 +0200
Subject: [PATCH] system: mark wireguard traffic

For use with nftables.
---
 web/system.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/system.py b/web/system.py
index 3dbc0b7..9639505 100644
--- a/web/system.py
+++ b/web/system.py
@@ -164,7 +164,7 @@ def save_config():
             # Print wireguard config.
             with open(output / 'etc/wireguard/wg.conf', 'w', encoding='utf-8') as f:
                 # Server configuration.
-                wg_intf = '[Interface]\nListenPort = {port}\nPrivateKey = {key}\n\n'
+                wg_intf = '[Interface]\nListenPort = {port}\nPrivateKey = {key}\nFwMark = 51820\n\n'
                 f.write(wg_intf.format(port=settings.get('wg_port') or 51820, key=settings.get('wg_key')))
 
                 # Client configuration.