From 02b375d7e6c3724f62ab7d7bf44cb2944ff621e5 Mon Sep 17 00:00:00 2001
From: Karan Parashar <whyredfire@gmail.com>
Date: Wed, 28 Oct 2026 21:43:36 +0530
Subject: [PATCH] fix(wireguard): Allow egress to Traefik pod ports

---
 apps/wireguard/networkpolicy.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/apps/wireguard/networkpolicy.yaml b/apps/wireguard/networkpolicy.yaml
index 6525d72..9f2889a 100644
--- a/apps/wireguard/networkpolicy.yaml
+++ b/apps/wireguard/networkpolicy.yaml
@@ -17,6 +17,18 @@ spec:
           podSelector:
             matchLabels:
               k8s-app: kube-dns
+    - ports:
+        - port: 8000
+          protocol: TCP
+        - port: 8443
+          protocol: TCP
+      to:
+        - namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: traefik
+          podSelector:
+            matchLabels:
+              app.kubernetes.io/name: traefik
     - to:
         - ipBlock:
             cidr: 192.168.2.0/24