make default route via nebula node (full subnet routing, 0.0.0.0/0, etc.)

[darren]

Wireguard do someting magic while settting

AllowedIPs = 0.0.0.0/0, ::/0

And all traffic will route by that wireguard peer.

But if set nebula's unsafe_route 0.0.0.0/0, it will failed to start:

level=fatal msg="failed to set mtu 1300 on route 0.0.0.0/0; file exists"