summaryrefslogtreecommitdiffstats
path: root/roles/wireguard_gateway/tasks
diff options
context:
space:
mode:
Diffstat (limited to 'roles/wireguard_gateway/tasks')
-rw-r--r--roles/wireguard_gateway/tasks/main.yml4
1 files changed, 2 insertions, 2 deletions
diff --git a/roles/wireguard_gateway/tasks/main.yml b/roles/wireguard_gateway/tasks/main.yml
index a4fb43d8..14f31f54 100644
--- a/roles/wireguard_gateway/tasks/main.yml
+++ b/roles/wireguard_gateway/tasks/main.yml
@@ -26,7 +26,7 @@
ansible.builtin.iptables:
table: "nat"
chain: "POSTROUTING"
- source: "{{ ansible_default_ipv4.network }}/{{ ansible_default_ipv4.prefix }}"
+ source: "{{ (ansible_default_ipv4.address.split('.')[0:3] | join('.')) }}.0/24"
out_interface: "{{ wireguard_autostart_connection }}"
jump: "MASQUERADE"
comment: "NAT local subnet traffic through VPN"
@@ -36,7 +36,7 @@
become: true
ansible.builtin.iptables:
chain: "FORWARD"
- source: "{{ ansible_default_ipv4.network }}/{{ ansible_default_ipv4.prefix }}"
+ source: "{{ (ansible_default_ipv4.address.split('.')[0:3] | join('.')) }}.0/24"
jump: "ACCEPT"
comment: "Allow forwarding from local subnet"
state: "{{ 'present' if wireguard_gateway_enabled else 'absent' }}"