branch master updated: doc: cuirass: Add information about NAT and keep-alive.

[Mathieu Othacehe]

This is an automated email from the git hooks/post-receive script.

mothacehe pushed a commit to branch master
in repository maintenance.

The following commit(s) were added to refs/heads/master by this push:
     new 6e80806  doc: cuirass: Add information about NAT and keep-alive.
6e80806 is described below

commit 6e80806e009b39126c3fc78821037f8563c7d306
Author: Mathieu Othacehe <othacehe@gnu.org>
AuthorDate: Thu Apr 22 09:54:15 2021 +0200

    doc: cuirass: Add information about NAT and keep-alive.
    
    * doc/cuirass.org: Add information about NAT and keep-alive.
---
 doc/cuirass.org | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/doc/cuirass.org b/doc/cuirass.org
index 4f1298a..4616dd7 100644
--- a/doc/cuirass.org
+++ b/doc/cuirass.org
@@ -53,7 +53,8 @@ network. The next section describes how to add a new external 
machine.
                     (name "peer")
                     (endpoint "ci.guix.gnu.org:51820")
                     (public-key "wOIfhHqQ+JQmskRS2qSvNRgZGh33UxFDi8uuSXOltF0=")
-                    (allowed-ips '("10.0.0.1/32")))))))
+                    (allowed-ips '("10.0.0.1/32"))
+                    (keep-alive 25)))))
 #+END_SRC
 
     The only field to be edited in the Wireguard service is the ~addresses~
@@ -61,6 +62,10 @@ network. The next section describes how to add a new 
external machine.
     subnet.  An available address must be picked, see the *External machines*
     section above.  This section must be updated accordingly.
 
+    The keep-alive at 25 secondes is important if the remote machine is
+    sitting behind a NAT.  More details in the "NAT and Firewall Traversal
+    Persistence" section of the Wireguard 
[[https://www.wireguard.com/quickstart/][quick start]] guide.
+
  2. Add the external machine Wireguard public key on Berlin. The new external
     machine public key can be obtained this way: