Nix flake configuration for my various machines (clients and homelab servers)
fix dns queries in wg namespace
Parthiv Krishna
(Jun 25, 2026, 7:00 AM UTC)
6d49bea3
047165ec
+14
-1
+14
-1
modules/features/selfhosted/media/media-base.nix
+14
-1
modules/features/selfhosted/media/media-base.nix
···
101
101
let
102
102
ip = "${pkgs.iproute2}/bin/ip";
103
103
in
104
-
"${ip} netns exec wg ${ip} link set wg0 mtu 1280";
104
+
pkgs.writeShellScript "wg-post-start" ''
105
+
${ip} netns exec wg ${ip} link set wg0 mtu 1280
106
+
107
+
# read VPN resolv.conf, force-route DNS
108
+
# queries inside namespace via wg0 interface
109
+
while IFS= read -r ns; do
110
+
ns="''${ns#nameserver }"
111
+
if [[ $ns == *.* ]]; then
112
+
${ip} -n wg route replace "$ns/32" dev wg0
113
+
else
114
+
${ip} -n wg -6 route replace "$ns/128" dev wg0
115
+
fi
116
+
done < /etc/netns/wg/resolv.conf
117
+
'';
105
118
106
119
services = {
107
120
vpn-test =