Merge pull request #29753 from andir/wireguard-allowed-ips-as-route-optional
networking.wireguard: added `allowedIpsAsRoutes` boolean to control p…
This commit is contained in:
commit
08b827ae8e
|
@ -95,6 +95,14 @@ let
|
||||||
type = with types; listOf (submodule peerOpts);
|
type = with types; listOf (submodule peerOpts);
|
||||||
};
|
};
|
||||||
|
|
||||||
|
allowedIPsAsRoutes = mkOption {
|
||||||
|
example = false;
|
||||||
|
default = true;
|
||||||
|
type = types.bool;
|
||||||
|
description = ''
|
||||||
|
Determines whether to add allowed IPs as routes or not.
|
||||||
|
'';
|
||||||
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
};
|
};
|
||||||
|
@ -217,11 +225,11 @@ let
|
||||||
|
|
||||||
"${ipCommand} link set up dev ${name}"
|
"${ipCommand} link set up dev ${name}"
|
||||||
|
|
||||||
(map (peer:
|
(lib.optional (values.allowedIPsAsRoutes != false) (map (peer:
|
||||||
(map (allowedIP:
|
(map (allowedIP:
|
||||||
"${ipCommand} route replace ${allowedIP} dev ${name} table ${values.table}"
|
"${ipCommand} route replace ${allowedIP} dev ${name} table ${values.table}"
|
||||||
) peer.allowedIPs)
|
) peer.allowedIPs)
|
||||||
) values.peers)
|
) values.peers))
|
||||||
|
|
||||||
values.postSetup
|
values.postSetup
|
||||||
]);
|
]);
|
||||||
|
|
Loading…
Reference in New Issue