adtya/configuration.nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

all: open ports for wireguard

Browse source
This commit is contained in:
Adithya 2024-10-27 17:38:25 +05:30
parent ae460927ec
commit 08098079db
Signed by: adtya
GPG key ID: B8857BFBA2C47B9C
1 changed files with 9 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
hosts/shared/wireguard.nix
View file

@ -12,7 +12,6 @@ let
peer-layne = mkPeer "192.168.1.14:51834" "qhthtzB7vTGRfS1RGyP7RJ+BZLKd/BNxhaTJvAlYuyo=" "10.10.10.14"; peer-layne = mkPeer "192.168.1.14:51834" "qhthtzB7vTGRfS1RGyP7RJ+BZLKd/BNxhaTJvAlYuyo=" "10.10.10.14";
selectPeer = host: peer: if hostName == host then [ ] else [ peer ]; selectPeer = host: peer: if hostName == host then [ ] else [ peer ];
interface-name = "Homelab"; interface-name = "Homelab";
in in
{ {
nodeconfig.wireguard = { nodeconfig.wireguard = {
@ -21,10 +20,13 @@ in
endpoint-publickey = "NNw/iDMCTq8mpHncrecEh4UlvtINX/UUDtCJf2ToFR4="; endpoint-publickey = "NNw/iDMCTq8mpHncrecEh4UlvtINX/UUDtCJf2ToFR4=";
allowed-ips = if hostName == "skipper" then [ "10.10.10.0/24" ] else [ "10.10.10.1" "10.10.10.2" "10.10.10.3" ]; allowed-ips = if hostName == "skipper" then [ "10.10.10.0/24" ] else [ "10.10.10.1" "10.10.10.2" "10.10.10.3" ];
}; };
networking.wg-quick.interfaces.${interface-name}.peers = if hostName == "skipper" then [ ] else networking = {
firewall.allowedUDPPorts = [ config.nodeconfig.wireguard.listen-port ];
wg-quick.interfaces.${interface-name}.peers = if hostName == "skipper" then [ ] else
((selectPeer "rico0" peer-rico0) ((selectPeer "rico0" peer-rico0)
++ (selectPeer "rico1" peer-rico1) ++ (selectPeer "rico1" peer-rico1)
++ (selectPeer "rico2" peer-rico2) ++ (selectPeer "rico2" peer-rico2)
++ (selectPeer "wynne" peer-wynne) ++ (selectPeer "wynne" peer-wynne)
++ (selectPeer "layne" peer-layne)); ++ (selectPeer "layne" peer-layne));
};
} }