Yunohost only local and VPN ( .local)

[tituspijean]

@Bauerbyter

Does this setup sound like a good idea? Is it secure? Do I miss something?

Yes, yes, and apparently no. Except…

@Bauerbyter

I tried it for one whole week and tried to read a lot in the forum (even translated some french) but somehow I am not getting mDSN to work. I cannot access yunohost.local, or test.local (added the domain). I am using a fritzbox as router. What can I do?

Sorry about that. mDNS does not go through WireGuard tunnels by default because they do not allow multicast. I am loosely investigating it whenever I have some time. My rough trials brought me to:

1. CLI: ip link set dev wg0 multicast on
2. Add 224.0.0.251/32, ff02::fb/128 in the AllowedIPs of your WireGuard peers. These are the multicast addresses.
3. Reinstall avahi (sudo apt install avahi-utils and systemctl enable --now avahi-daemon)
4. Tweak avahi configuration (/etc/avahi/avahi-daemon.conf) to allow point-to-point and reflector, and list wg0 in the enabled interfaces.
5. Restart yunomdns and avahi-daemon services.

I would love a guinea pig to test it, since I am unsure how tweaked is my setup.
So far I can get .local domains published by the server, but not ones published by other peers.

Edit: oops I overlooked the “because I am a noob” part. I would totally be fine if you cannot try out these yourself. It’s good for me to have finally written it out so that other can investigate too.