adtya/configuration.nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

wynne: use wireguard module

Browse source
This commit is contained in:
Adithya 2024-07-06 00:39:36 +05:30
parent aae94c69ad
commit 97d2bcc6ae
Signed by: adtya
GPG key ID: B8857BFBA2C47B9C
1 changed files with 10 additions and 25 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

35
hosts/wynne/wireguard.nix
View file

@ -1,4 +1,6 @@
{ config, ... }: { { config, ... }: {
imports = [ ../shared/wireguard.nix ];
sops.secrets = { sops.secrets = {
"wireguard/wynne/pk" = { "wireguard/wynne/pk" = {
mode = "400"; mode = "400";
@ -12,31 +14,14 @@
}; };
}; };
networking.firewall.trustedInterfaces = [ "wg0" ]; nodeconfig.wireguard = {
networking.wireguard = {
enable = true; enable = true;
interfaces = { listen-port = 51833;
wg0 = { pk-file = config.sops.secrets."wireguard/wynne/pk".path;
ips = [ psk-file = config.sops.secrets."wireguard/wynne/psk".path;
"10.10.10.13/24" node-ips = [
"fd7c:585c:c4ae::13/64" "10.10.10.13/24"
]; "fd7c:585c:c4ae::13/64"
listenPort = 51833; ];
privateKeyFile = config.sops.secrets."wireguard/wynne/pk".path;
peers = [
{
name = "Proxy";
endpoint = "165.232.180.97:51821";
publicKey = "NNw/iDMCTq8mpHncrecEh4UlvtINX/UUDtCJf2ToFR4=";
presharedKeyFile = config.sops.secrets."wireguard/wynne/psk".path;
persistentKeepalive = 20;
allowedIPs = [
"10.10.10.0/24"
"fd7c:585c:c4ae::0/64"
];
}
];
};
};
}; };
} }