feat: power management for nas

This commit is contained in:
Dominik Polakovics Polakovics 2026-04-11 09:31:43 +02:00
parent b02acb5b60
commit 46f42dab4b
5 changed files with 235 additions and 1 deletions

View file

@ -85,6 +85,12 @@
chain forward {
type filter hook forward priority filter; policy drop;
# Wake-on-access: flag new traffic aimed at the NAS so
# nas-wake-journal.service can fire a WOL. No verdict => falls
# through, does not broaden policy. ct state new skips ongoing
# flows; rate limit caps journal spam before it leaves the kernel.
ip daddr ${config.networkPrefix}.97.11 ct state new limit rate 30/minute log prefix "nas-wake: " comment "trigger wake-on-access"
iifname "wg_cloonar" counter accept comment "test wireguard"
iifname "wg_cloonar" oifname lo counter accept comment "wireguard to server"