From 5c481d664ab1a8dcba257ad73254a5edd66092a1 Mon Sep 17 00:00:00 2001
From: Hermes Agent <hermes@lazyworkhorse.net>
Date: Tue, 5 May 2026 02:41:29 +0000
Subject: [PATCH] fix: split tunnel on host VPN - only route 10.8.0.0/24

---
 hosts/lazyworkhorse/configuration.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hosts/lazyworkhorse/configuration.nix b/hosts/lazyworkhorse/configuration.nix
index 953c64e..2f13320 100644
--- a/hosts/lazyworkhorse/configuration.nix
+++ b/hosts/lazyworkhorse/configuration.nix
@@ -61,7 +61,7 @@
         {
           publicKey = "rY9zII3AOm8rog2rv02PyA3Bq7zdvTOGkZapfCV1DkE=";
           presharedKeyFile = config.age.secrets.wireguard_preshared_key.path;
-          allowedIPs = [ "0.0.0.0/0" "::/0" ];
+          allowedIPs = [ "10.8.0.0/24" ];
           endpoint = "vpn.lazyworkhorse.net:51820";
           persistentKeepalive = 25;
         }