X-Git-Url: https://iankelling.org/git/?p=distro-setup;a=blobdiff_plain;f=filesystem%2Fetc%2Fsystemd%2Fsystem%2Fopenvpn-client-tr%40.service;h=db6e7eb5c9bb03154ea0630fa30638da1b2c1456;hp=e99c755438c9918facd47cf90aee36427bbbc016;hb=ac3e00755e07d2e298769000f7ea50bc0854b510;hpb=4da3435e0d1918d90f59043deff2dffbdbe172c2 diff --git a/filesystem/etc/systemd/system/openvpn-client-tr@.service b/filesystem/etc/systemd/system/openvpn-client-tr@.service index e99c755..db6e7eb 100644 --- a/filesystem/etc/systemd/system/openvpn-client-tr@.service +++ b/filesystem/etc/systemd/system/openvpn-client-tr@.service @@ -24,6 +24,8 @@ LimitNPROC=10 ExecStartPre=/usr/bin/flock -w 20 /tmp/newns.flock /a/bin/newns/newns -n 10.173.0 start %i ExecStartPre=/sbin/iptables-restore /a/bin/distro-setup/transmission-firewall/netns.rules +# allow wireguard network to connect +ExecStartPre=/usr/sbin/ip r add 10.8.0.0/24 via 10.173.0.1 dev veth1-client ExecStopPost=/usr/bin/flock -w 20 /tmp/newns.flock /a/bin/newns/newns stop %i PrivateNetwork=true BindReadOnlyPaths=/etc/tr-resolv:/run/systemd/resolve:norbind /etc/basic-nsswitch:/etc/resolved-nsswitch:norbind