nebula: Only route traffic from the overlay domain over the interface

This commit is contained in:
SebastianStork 2026-03-02 01:20:24 +01:00
parent 399cbee22a
commit cb8d793df3
Signed by: SebastianStork
SSH key fingerprint: SHA256:tRrGdjYOwgHxpSc/wTOZQZEjxcb15P0tyXRsbAfd+2Q

View file

@ -132,7 +132,10 @@ in
matchConfig.Name = netCfg.overlay.interface;
address = [ netCfg.overlay.cidr ];
dns = netCfg.overlay.dnsServers;
domains = [ netCfg.overlay.domain ];
domains = [
"~${netCfg.overlay.domain}"
netCfg.overlay.domain
];
networkConfig.DNSSEC = false;
};
};