Comment on Help an idiot protect his homelab and few services exposed to the internet.
Appoxo@lemmy.dbzer0.com 3 days ago Yes. Split-tunneling…
But if you are really hardcore about restrictions and would need to update the profiles it will be a pita…
Scheduling stuff is annoying ;-;
unique_hemp@discuss.tchncs.de 3 days ago
AllowedIPs is a client side restriction that can be ignored anyway, no real security benefit from not just putting your entire network there.
MrTolkinghoen@lemmy.zip 3 days ago
Can you ellaborate?
The user can just edit the wg conf file and remove the restriction where it can and cannot connect to.
The file is not a baked immutable binary
MrTolkinghoen@lemmy.zip 2 days ago
Oh sorry I was thinking you were talking about something entirely different. Makes sense, and yes.