AGH + Wireguard on k3d
reddit / selfhosted

----------------------------------------------------------------------
repolevedamai · 2023-12-06 16:25

Hey everyone 👋

Sorry in advance if this is not the right subreddit for this, but here
it goes.

I've got debian running on my nuc, where I've installed k3d (mostly
for learning purposes as it's definitely not a requirement for what I
needed), so I'm pretty new to it.
Both AGH and wireguard run fine over traefik with https, I've open all
needed ports in my nuc (DNS UDP, VPN UDP, etc) and the wireguard UDP
port in my router.

I can't however get both to play nicely when pointing my router DNS
traffic over to the server, and most of the time AGH only seems to
pick traffic from my laptop (which I have /etc/hosts pointing to
specific domains), and ad-filtering doesn't seem to be working on the
overall network as well.
The domain I'm using is from namecheap which I'm getting the
certificates using cert-manager.
Is there anything else network-wise I should be doing to get this
working?
AGH and Wireguard are on different namespaces in k3d.
When I use tools nslookup and dig through the server IP it resolves
correctly, however, it doesn't via the router.

With some experimentation I've found that using ethernet instead of
wifi the router resolves correctly,
but then the VPN doesn't work as expected.

Maybe it relates to both DNS and VPN servers living on the same IP? Or
me using an actual domain in a local network?)

I'm lost here as I've tried multiple experiments to no avail.

If anyone has tried a similar setup please let me know, all help would
be awesome here.

Worth saying that everything worked fairly well when working with a
single docker-compose with the 2 services (of course without https,
certificates, load balancer and reverse-proxy).

Thanks in advance!