Comment on Wireguard easy and third party von service.
LetchLemon@lemmy.blahaj.zone 2 days agoQuick question (love your solution btw so eloquent could follow along easily which was such a nice change from the week i have had) does your solution manage multiple clients with different firewall requirements? Why i was heading down the wireguard ui route was the ease of firewall configuration per client. Its a weird thing where i feel headscale is a little bit more than i need and wireguard vanilla is a little too simplistic.
pcouy@lemmy.pierre-couy.fr 1 day ago
Do you have specific examples of the “different firewall requirements” ?
LetchLemon@lemmy.blahaj.zone 1 day ago
Its via gui but its basically just server side allow list so the client cant modify the ips it can access. The ips i use for https internet are 0.0.0.0/0:443 for example
pcouy@lemmy.pierre-couy.fr 1 day ago
The ansible role I made does not cover this. If you make a server an exit node for a network, the server gets configured to forward everything that comes from the wireguard network. Since my use case does not need this, I don’t think I’ll add it, but the role could be expanded to support ACLs by taking inspiration from how it deals with port forwarding.
LetchLemon@lemmy.blahaj.zone 1 day ago
Thats ok, thanks for the idea and sharing your project! Glad to hear this post was the push that convinced you to share it with the wider world its a cool project :)