Post #2741367

@arichtman@eigenmagic.net @futzle@old.mermaid.town @hugo@social.treehouse.systems it will do it, i think the issue is that you're trying to use the same addressing for "traffic from the world to my public v6" and a different access for "v6 traffic over the vpn". And that's where the firewall updates come in, for those allow rules? You can perhaps add interface conditions to otherwise more broad rules. But I agree with Deb, using ULA for this is preferable, then you can also have private services only listen on those. I might also argue for using the v4 peer addresses in case your isp's v6 goes bad. If you want to do it host to host, see wgautomesh and matching nixos service.