Merge pull request #84173 from bkchr/bkchr-fix-wg-quick

Fix wg-quick after wireguard got upstreamed
This commit is contained in:
Michele Guerini Rocco 2020-04-03 13:26:19 +02:00 committed by GitHub
commit b483a679ee
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -302,7 +302,7 @@ in {
###### implementation
config = mkIf (cfg.interfaces != {}) {
boot.extraModulePackages = [ kernel.wireguard ];
boot.extraModulePackages = optional (versionOlder kernel.kernel.version "5.6") kernel.wireguard;
environment.systemPackages = [ pkgs.wireguard-tools ];
# This is forced to false for now because the default "--validmark" rpfilter we apply on reverse path filtering
# breaks the wg-quick routing because wireguard packets leave with a fwmark from wireguard.