Enable LAN Access from Wireguard Peers

macos-enable-wireguard-gateway.sh

#!/bin/bash

# enable ip forwarding
sudo sysctl -w net.inet.ip.forwarding=1

# disable pf firewall
sudo pfctl -d

# flush nat rules
sudo pfctl -F nat

# add NAT rule (utun12 is the wireguard interface, alternatively CIDR can be used here)
echo "nat on en0 inet from utun12:network to any -> (en0)" | sudo pfctl -f -

# list nat rules
sudo pfctl -s nat

# enable pf firewall
sudo pfctl -e