From 744d2521ffc1c68fc0328731275c9fc7751f366d Mon Sep 17 00:00:00 2001 From: Ahmed Abdelhalim Date: Tue, 2 Sep 2025 01:30:46 +0200 Subject: Fix pihole and network manger DNS when VPN isn't active --- roles/wireguard_gateway/tasks/main.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'roles/wireguard_gateway') diff --git a/roles/wireguard_gateway/tasks/main.yml b/roles/wireguard_gateway/tasks/main.yml index a4fb43d8..14f31f54 100644 --- a/roles/wireguard_gateway/tasks/main.yml +++ b/roles/wireguard_gateway/tasks/main.yml @@ -26,7 +26,7 @@ ansible.builtin.iptables: table: "nat" chain: "POSTROUTING" - source: "{{ ansible_default_ipv4.network }}/{{ ansible_default_ipv4.prefix }}" + source: "{{ (ansible_default_ipv4.address.split('.')[0:3] | join('.')) }}.0/24" out_interface: "{{ wireguard_autostart_connection }}" jump: "MASQUERADE" comment: "NAT local subnet traffic through VPN" @@ -36,7 +36,7 @@ become: true ansible.builtin.iptables: chain: "FORWARD" - source: "{{ ansible_default_ipv4.network }}/{{ ansible_default_ipv4.prefix }}" + source: "{{ (ansible_default_ipv4.address.split('.')[0:3] | join('.')) }}.0/24" jump: "ACCEPT" comment: "Allow forwarding from local subnet" state: "{{ 'present' if wireguard_gateway_enabled else 'absent' }}" -- cgit v1.2.3