From bff77c7fb34e9ba0ae1f42ba920ff09f9faca30d Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Sun, 30 Jan 2022 16:05:53 +0100
Subject: wireguard/gateway: switch to nftables

---
 roles/network/wireguard/gateway/templates/systemd.network.j2 | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'roles/network/wireguard/gateway/templates/systemd.network.j2')

diff --git a/roles/network/wireguard/gateway/templates/systemd.network.j2 b/roles/network/wireguard/gateway/templates/systemd.network.j2
index 6847aa6a..d1dd2139 100644
--- a/roles/network/wireguard/gateway/templates/systemd.network.j2
+++ b/roles/network/wireguard/gateway/templates/systemd.network.j2
@@ -6,7 +6,10 @@ Name={{ item.key }}
 Address={{ addr }}
 {% endfor %}
 {% if 'ip_masq' in item.value and item.value.ip_masq %}
-IPMasquerade=yes
+IPMasquerade=ipv4
+{% endif %}
+{% if 'ip_snat' in item.value %}
+IPForward=ipv4
 {% endif %}
 {% if 'default_gateway' in item.value %}
 
-- 
cgit v1.2.3