From bedfae84247ca8c1f2a6c97d616b89a1ddc52a6a Mon Sep 17 00:00:00 2001
From: Alex Auvolat <alex@adnab.me>
Date: Tue, 22 Nov 2022 16:22:05 +0100
Subject: [PATCH] Fix wg-quick MTU because it does bad stuff by default

---
 nix/deuxfleurs.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nix/deuxfleurs.nix b/nix/deuxfleurs.nix
index 5e87e5d..e2c1c17 100644
--- a/nix/deuxfleurs.nix
+++ b/nix/deuxfleurs.nix
@@ -214,6 +214,7 @@ in
       address = [ "${cfg.cluster_ip}/16" ];
       listenPort = cfg.wireguard_port;
       privateKeyFile = "/var/lib/deuxfleurs/wireguard-keys/private";
+      mtu = 1420;
       peers = map ({ publicKey, endpoint, IP, site_name, lan_endpoint, ... }: {
         publicKey = publicKey;
         allowedIPs = [ "${IP}/32" ];