Comment on Help an idiot protect his homelab and few services exposed to the internet.
unique_hemp@discuss.tchncs.de 3 days agoYou can just specify AllowedIPs in the wireguard client config to route only traffic to your services through the VPN, works great.
Yes. Split-tunneling…
But if you are really hardcore about restrictions and would need to update the profiles it will be a pita…
Scheduling stuff is annoying ;-;
unique_hemp@discuss.tchncs.de 3 days ago
AllowedIPs is a client side restriction that can be ignored anyway, no real security benefit from not just putting your entire network there.
MrTolkinghoen@lemmy.zip 3 days ago
Can you ellaborate?
The user can just edit the wg conf file and remove the restriction where it can and cannot connect to.
The file is not a baked immutable binary