From fce2789366064c9598f632d2f87b7988c4e36d02 Mon Sep 17 00:00:00 2001
From: Daniel Kempkens <daniel+git@kempkens.io>
Date: Sat, 6 Jul 2024 23:36:34 +0200
Subject: [PATCH] wireguard: update config

---
 agenix/hosts/mediaserver/wireguard/config.age | Bin 602 -> 602 bytes
 system/nixos/wireguard-netns.nix              |   1 +
 2 files changed, 1 insertion(+)

diff --git a/agenix/hosts/mediaserver/wireguard/config.age b/agenix/hosts/mediaserver/wireguard/config.age
index 75ffd62c8acd3930c405e252e691cf6218db116a..e861368064c529859a9cea8b7cc1dbb04f91c0e0 100644
GIT binary patch
delta 569
zcmV-90>=H?1lk0UEPpjkL{@TSbTKbfGB{H(YcFh0Z$?9Qa&R<HL^w-KPfKJ$R&ZlR
zPgr*|cM4H2PcLIwPc?H*aY->uby81hD^*TZFmh{CGiPc>QAk*6No7`QZ#QsjO$seO
zAaiqQEoEdfH8n9gAXzyyS!rh=I7e}6aWzj_QZh$yb4PJ=YJWs)dT~KgcyvxHY;Qy{
zZ%QzAP)bQwSuaFE3QkLGdQVVwG)h%TRzpv6bYgHxa!q7$P;W+bOm1*^Zb3y<P(w{+
zNK0yO3N0-yAZ9^$D>f^5XjMmNOjv7dK}l+Laa4J4OJ!$kO-gt#G*DJbR#;MJWN~Rp
z3QuB$M#sIFX@A75Qoy7C$S%GFtV)=wnzJ%|xD!2*cBtZAN)~ry)a5S~tW19Q$ifYl
zhhs+uhQ0$ePh40C5dzi~x}Uhq;=pe`21QVI@k!LtiCaN?C8A546BNsIAwZur!sKRF
zs@5hB&0RC9r^5r)$MpUzRAU$O$S5w(wW%-!ZwYS^aDVy}kv^*yXit}#3}unAO{ejN
zm1p<l42yhHGae&2xCh;LJ(XSy-F37XL6On}r<$cDh|(0epN^*33}HhD9&NG{ngkK{
zev6#}F1bhiH`D<ge{@zj`E-b}1c);K&*${mnPKMCK;aLbhsexRdBDF*W+r%`F^y5m
zkw8X{Gcq{4Pzj-K@P4TMmm9-RQ{$HDU(1R;hUlO2u$}9B!2%4R*o(><@mvbY_%W%x
H8B6rn`A6%V

delta 569
zcmV-90>=H?1lk0UEPrWfO>Asuc2F;2bu)KVRcB3EZa6D>Ia5<oRC+N}QC4V1aYt`a
zI891!X9`bFGF3t^QgK;QS3+lQXH85*XGlUcMlwlNW-?Dpd1FXSZ8u0xIXOftGzu*~
zAaiqQEoEdfH8n9gAXzyyS!rh=aWY9Yc6CEDMlnW2Ge|2>X@6{TZg6=oYiuxMT54}s
zbXhkzP*p=KVJ}ow3SwADc49bEML1J#XLUzQPHJmecW`TSLU~IvNpfsXQ7cYILTYwW
zSw?ba3N0-yAbM1GaXD&uQF2#NLpC>RS21QdOk!q8M|D<6SxPr)bWnCiLNs=6d0AFt
z3bRpWCZS-UMt@V6o(3%X*b$lD8JN4kHaZ{zxcZmU&avVz8Nf7&&z=D|NQcGCY3|K<
zVZRmRHdpJj@Wd!irq>8Y_9n@e6aCIb_HT65eS>bjD3EaJ#boOrvcE;M?gaT-hLL5N
zO`}OhpFeGKEZdEVheHYST*TzMbm!~e3U=J=plzH^TYqiIdG%N5`1X8{5^n(Xuas=A
zb`g5$*rnDaEyd)&eA@1Dkd)g@x>+Dxgp_|0j-)1-4H43uIGkI1Q&Z=ue_3)&ETt4i
zS^L-AA&EAX=B!+?!FWACSPuaKW|nB7Gx%_r+V4J>hj*P&D5TrPj66@8pZNG&6Gv#O
zFjCV%&@#|Wkx?)*F?nPl3p+}1Y+k4&eV5?4Ua_d8N7w%Pi3BJ_%RLAMRcnk|-S8`n
HPRK`MWz6wE

diff --git a/system/nixos/wireguard-netns.nix b/system/nixos/wireguard-netns.nix
index c29f282..9196372 100644
--- a/system/nixos/wireguard-netns.nix
+++ b/system/nixos/wireguard-netns.nix
@@ -69,6 +69,7 @@
         ${iproute}/bin/ip link set wg0 netns wg
         ${iproute}/bin/ip -n wg address add ${secret.wireguard.ipv4} dev wg0
         ${iproute}/bin/ip -n wg -6 address add ${secret.wireguard.ipv6} dev wg0
+        ${iproute}/bin/ip -n wg link set wg0 mtu 1320
         ${iproute}/bin/ip -n wg link set wg0 up
         ${iproute}/bin/ip -n wg route add default dev wg0
         ${iproute}/bin/ip -n wg -6 route add default dev wg0