Commit `0d3e12f37190`

Vincent Demeester <vincent@sbr.pm>

2026-06-10 12:07:27

feat(aomi): trust wg0 interface in firewalld after WireGuard setup

Adds wg0 to the trusted zone so all traffic over the homelab VPN is allowed, including SSH access via 10.100.0.17.

main

1 parent ca317ad

Changed files (1)

imperative

aomi

bootstrap.sh

@@ -228,6 +228,13 @@ setup_wireguard() {
 	sudo dnf install -y wireguard-tools
 	sudo systemctl enable wg-quick@wg0
 
+	# Trust wg0 interface in firewall (allows SSH and all traffic over VPN)
+	if command -v firewall-cmd &>/dev/null; then
+		log_info "Adding wg0 to firewalld trusted zone..."
+		sudo firewall-cmd --zone=trusted --add-interface=wg0 --permanent
+		sudo firewall-cmd --reload
+	fi
+
 	if [[ -f /etc/wireguard/private.key ]]; then
 		log_info "WireGuard private key exists, starting service..."
 		sudo systemctl start wg-quick@wg0

Commit 0d3e12f37190

Commit `0d3e12f37190`