fix: move unsafe_routes to settings.tun.unsafe_routes (correct NixOS nebula option path)

2026-04-01 17:13:37 -05:00
parent 0e61efe5b5
commit 71ae25a58c
1 changed files with 2 additions and 2 deletions
@@ -162,10 +162,10 @@ in
      tun = {
        # Interface name
        device = "nebula0";
-        # unsafe_routes for hosts that need access to a non-Nebula subnet
-        unsafeRoutes = cfg.unsafeRoutes;
      };

+      settings.tun.unsafe_routes = map (r: { route = r.route; via = r.via; }) cfg.unsafeRoutes;
+
      # Firewall: permissive defaults — tighten per-host as desired
      firewall = {
        outbound = [