From d3049557ffc13afd866338581442f8117be120ae Mon Sep 17 00:00:00 2001
From: Kjetil Orbekk <kj@orbekk.com>
Date: Tue, 31 May 2022 08:25:28 -0400
Subject: Update vpn

---
 modules/vpn.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'modules')

diff --git a/modules/vpn.nix b/modules/vpn.nix
index c50d773..ff47c0a 100644
--- a/modules/vpn.nix
+++ b/modules/vpn.nix
@@ -6,7 +6,7 @@ let
   vpn-prefix = "2001:470:8e2e:1000";
 
   mkConfig = host: ip: {
-    ips = [ "${vpn-prefix}::${ip}/64" ];
+    ips = [ "${vpn-prefix}::${ip}/128" ];
     publicKey = (builtins.readFile ../secrets/${host}-wireguard-key.pub);
     endpoint = null;
     relay = false;
@@ -27,7 +27,7 @@ let
 
   mkPeer = hostConfig: {
     inherit (hostConfig) publicKey endpoint;
-    allowedIPs = hostConfig.ips ++ (lib.optionals (hostConfig.relay && !cfg.is_server) [ "0.0.0.0/0" "::/0" ]);
+    allowedIPs = hostConfig.ips; # ++ (lib.optionals (hostConfig.relay && !cfg.is_server) [ "0.0.0.0/0" "::/0" ]);
   };
 
   getPeers = host:
-- 
cgit v1.2.3