Add iptables shunt for ts-input and ts-forward

boxcutter · Jun 16, 2024 · ba62741 · ba62741
1 parent b2d719d
commit ba62741
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/cookbooks/boxcutter_tailscale/recipes/default.rb b/cookbooks/boxcutter_tailscale/recipes/default.rb
@@ -16,6 +16,13 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+node.default['fb_iptables']['dynamic_chains']['filter']['ts-input'] = [
+  'INPUT'
+]
+node.default['fb_iptables']['dynamic_chains']['filter']['ts-forward'] = [
+  'FORWARD'
+]
+
 include_recipe 'boxcutter_tailscale::packages'
 
 service 'tailscaled' do