From a026dfa4a18cc4be983f8d4994ccf69548747687 Mon Sep 17 00:00:00 2001
From: JJGadgets <git@jjgadgets.tech>
Date: Mon, 25 Aug 2025 00:51:22 +0800
Subject: [PATCH] feat(cilium): netpols

---
 .../core/_networking/cilium/netpols/labelled-allow-egress.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/kube/deploy/core/_networking/cilium/netpols/labelled-allow-egress.yaml b/kube/deploy/core/_networking/cilium/netpols/labelled-allow-egress.yaml
index 6ed28816..f01c7fd6 100644
--- a/kube/deploy/core/_networking/cilium/netpols/labelled-allow-egress.yaml
+++ b/kube/deploy/core/_networking/cilium/netpols/labelled-allow-egress.yaml
@@ -459,6 +459,9 @@ spec:
     matchLabels:
       egress.home.arpa/mullvad: allow
   egress:
+    - # direct
+      toFQDNs:
+        - matchPattern: "*.relays.mullvad.net"
     - # SOCKS5 proxy
       toCIDRSet:
         - cidr: "10.8.0.1/32"