2026-04-04 03:03:53 +00:00
1 changed files with 2 additions and 2 deletions
@@ -162,10 +162,10 @@ in
      tun = {
        # Interface name
        device = "nebula0";
-        # unsafe_routes for hosts that need access to a non-Nebula subnet
-        unsafeRoutes = cfg.unsafeRoutes;
      };

+      settings.tun.unsafe_routes = map (r: { route = r.route; via = r.via; }) cfg.unsafeRoutes;
+
      # Firewall: permissive defaults — tighten per-host as desired
      firewall = {
        outbound = [