talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Transition the home server to the dynamic netgraph devices.

Browse Source
This commit is contained in:
Tom Alexander
2023-04-27 16:58:06 -04:00
parent 24bfa840ff
commit 8867761939
4 changed files with 20 additions and 58 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
ansible/roles/jail/files/jails/cloak.conf
View File

@@ -1,8 +1,11 @@
cloak {
path = "/jail/main/jails/cloak";
path = "/jail/main/jails/${name}";
vnet;
vnet.interface += "host_link2";
vnet.interface += "wg_uplink0";
exec.prestart += "/usr/local/bin/jail_netgraph_bridge start restricted_nat jail${name} 10.215.2.1/24";
exec.poststop += "/usr/local/bin/jail_netgraph_bridge stop restricted_nat jail${name}";
vnet.interface += "jail${name}";
vnet.interface += "cloak";
devfs_ruleset = 13;
mount.devfs; # To expose tun device