From 2c29da7c5d2b7050b302cb5b4b5fcd31d820fade Mon Sep 17 00:00:00 2001
From: Trumeet <yuuta@yuuta.moe>
Date: Wed, 5 May 2021 15:53:33 -0700
Subject: fix(agent): restrict allowed IPs

---
 agent/src/main/resources/wg.conf.ftlh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/agent/src/main/resources/wg.conf.ftlh b/agent/src/main/resources/wg.conf.ftlh
index cc51ede..4928bab 100644
--- a/agent/src/main/resources/wg.conf.ftlh
+++ b/agent/src/main/resources/wg.conf.ftlh
@@ -8,4 +8,4 @@ PresharedKey = ${preshared_key}
 <#if endpoint??>
 Endpoint = ${endpoint}
 </#if>
-AllowedIPs = 0.0.0.0/0, ::/0
+AllowedIPs = 10.127.0.0/16, 172.20.0.0/14, 172.31.0.0/16, fc00::/7, fe80::/64
-- 
cgit v1.2.3