Before we relied on the IP being first in the interfaces file, which is less than optimal. Now we use nftables to ensure the correct source IP is set only for the (fwmarked) wireguard traffic. Also remove iface hints from interfaces configuration as they are not needed with ifupdown-ng.
		
			
				
	
	
		
			12 lines
		
	
	
	
		
			199 B
		
	
	
	
		
			Django/Jinja
		
	
	
	
	
	
			
		
		
	
	
			12 lines
		
	
	
	
		
			199 B
		
	
	
	
		
			Django/Jinja
		
	
	
	
	
	
| iface lo
 | |
|     address {{ wg_ip }}
 | |
| 
 | |
| auto wg
 | |
| iface wg
 | |
|     use wireguard
 | |
| {% if wg_net is defined %}
 | |
|     address {{ wg_net }}
 | |
| {% endif %}
 | |
| {% if wg_net6 is defined %}
 | |
|     address {{ wg_net6 }}
 | |
| {% endif %}
 |