diff --git a/playbooks/filesystem/yggdrasil/etc/network/interfaces.d/br0.j2 b/playbooks/filesystem/yggdrasil/etc/network/interfaces.d/br0.j2 index a780aaf..4bf045d 100644 --- a/playbooks/filesystem/yggdrasil/etc/network/interfaces.d/br0.j2 +++ b/playbooks/filesystem/yggdrasil/etc/network/interfaces.d/br0.j2 @@ -4,9 +4,9 @@ iface br0 inet static post-up /usr/local/sbin/post-up-$IFACE.nft post-up ip rule add dev $IFACE table 66 - post-up ip route add {{ subnet }} dev {{ ethx }} table 66 + post-up ip rule add dev $IFACE to {{ subnet }} table main priority 1 - pre-down ip route del {{ subnet }} dev {{ ethx }} table 66 + pre-down ip rule del dev $IFACE to {{ subnet }} table main priority 1 pre-down ip rule del dev $IFACE table 66 pre-down /usr/local/sbin/pre-down-$IFACE.nft diff --git a/playbooks/tasks/hosts/firewall.yml b/playbooks/tasks/hosts/firewall.yml index fd0ca83..99ead47 100644 --- a/playbooks/tasks/hosts/firewall.yml +++ b/playbooks/tasks/hosts/firewall.yml @@ -19,5 +19,13 @@ systemd: name: nftables state: restarted + register: nftables_restart when: nftables_conf is changed + +- name: Restart networking + systemd: + name: networking + state: restarted + when: + nftables_restart is changed