Mastodawn

#webdev folks ! how do you ever ublock Cross-origin requests in your comment #api headers? sets CORS headers. Fix in comment-api/src/main.rs — add CORS headers to warp routes. Park for now. for #selfhosted things
I have #tailscale on and my self hosted CI has #wirguard network isolation between hosts and amongst ci nodes?

Show thread

Michal

Sep 17, 2023

@piggo My #wirguard trick for this is snippet:

[Interface]
Address = 10.1.2.3/32
Table = off
PostUp = ip route add default via 10.1.2.3 dev wg0 table 1000 ; ip rule add from 10.1.2.3 table 1000 ; ip route add 10.1.2.0/24 dev wg0

[Peer] # VPS
AllowedIPs = 0.0.0.0/0

Usually, using "0.0.0.0/0" would route *all* traffic through Wireguard, but the "Table=off" plus the custom table and routing rule make it so that *only* traffic bound/originating from the wg0 interface gets send back through it.