From aaf1e280fcd7d09b230da4384e89d5b5bace89be Mon Sep 17 00:00:00 2001
From: kalipso <kalipso@c3d2.de>
Date: Tue, 14 Jan 2025 15:40:22 +0100
Subject: [PATCH] [vpn] enable ip_forward on servers

---
 machines/modules/malobeo/wireguard.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/machines/modules/malobeo/wireguard.nix b/machines/modules/malobeo/wireguard.nix
index 81f4bb35..89207bbf 100644
--- a/machines/modules/malobeo/wireguard.nix
+++ b/machines/modules/malobeo/wireguard.nix
@@ -63,6 +63,8 @@ in
         '';
       }
     ];
+    
+    boot.kernel.sysctl."net.ipv4.ip_forward" = mkIf (myPeer.role == "server") 1;
 
     networking.wg-quick = {
       interfaces = {