From ccf0b2c35d3d607fcd7498889549ade27cd3aaa2 Mon Sep 17 00:00:00 2001 From: Miguel Palhas Date: Fri, 21 Aug 2026 10:20:19 +0100 Subject: [PATCH] fix(smb): widen hosts allow to 10/8 for wg clients Co-Authored-By: Claude Fable 5 --- hosts/yolo/default.nix | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/hosts/yolo/default.nix b/hosts/yolo/default.nix index 214d910..5aba29a 100644 --- a/hosts/yolo/default.nix +++ b/hosts/yolo/default.nix @@ -60,7 +60,8 @@ # Exposes /home/naps62 to arrakis/konishi (custom.smbMounts on both, mounted # at ~/yolo). Guest auth — the home dir holds SSH keys and credentials, so - # the only guard is `hosts allow` limiting clients to the private nets. + # the only guard is `hosts allow` limiting clients to 10/8 (LAN + wireguard + # peers — desktops connect from wg addresses, 10.0.*). # Clients address this VM as 10.7.10.2; keep that DHCP lease reserved. samba = { enable = true; @@ -68,7 +69,7 @@ settings = { global = { "map to guest" = "bad user"; - "hosts allow" = "10.6.0.0/16 10.7.0.0/16 127.0.0.1"; + "hosts allow" = "10.0.0.0/8 127.0.0.1"; "hosts deny" = "ALL"; }; home = {