I honestly can’t get my head around this. I have a machine with Linux (endeavouros), and docker with a few containers. Since I want all the traffic from this system to go through the VPN, do I need to set up gluetun? I think not, but I am not 100% sure…

  • TCB13@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    8 hours ago

    but without nix it’s a pita to maintain through restores/rebuilds.

    No it isn’t. You can even define those routing polices in your systemd network unit alongside the network interface config and it will manage it all for you.

    If you aren’t comfortable with systemd, you can also use simple “ip” and “route” commands to accomplish that, add everything to a startup script and done.

    major benefit to using a contained VPN or gluetun is that you can be selective on what apps use the VPN.

    Systemd can do that for you as well, you can tell that a certain service only has access to the wg network interface while others can use eth0 or wtv.