cleanup secrets
This commit is contained in:
parent
7377f186f2
commit
2d280443e0
5 changed files with 19 additions and 8 deletions
|
@ -11,11 +11,15 @@ in
|
||||||
enable = true;
|
enable = true;
|
||||||
interfaces = {
|
interfaces = {
|
||||||
wg0 = {
|
wg0 = {
|
||||||
inherit (peers."${config.networking.hostName}") ips listenPort;
|
ips = [
|
||||||
|
"10.8.1.3/24"
|
||||||
|
"fdd9:69ae:9703::3/64"
|
||||||
|
];
|
||||||
|
listenPort = 51821;
|
||||||
privateKeyFile = "/etc/wireguard/private.key";
|
privateKeyFile = "/etc/wireguard/private.key";
|
||||||
generatePrivateKeyFile = true;
|
generatePrivateKeyFile = true;
|
||||||
peers = with peers; [
|
peers = with peers; [
|
||||||
Proxy.peer
|
Proxy
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
|
@ -1,6 +1,5 @@
|
||||||
{ pkgs
|
{ pkgs
|
||||||
, adtyaxyz
|
, adtyaxyz
|
||||||
, secrets
|
|
||||||
, ...
|
, ...
|
||||||
}:
|
}:
|
||||||
let
|
let
|
||||||
|
@ -25,7 +24,7 @@ in
|
||||||
|
|
||||||
handle /.well-known/discord {
|
handle /.well-known/discord {
|
||||||
header Access-Control-Allow-Origin *
|
header Access-Control-Allow-Origin *
|
||||||
respond `${secrets.discord_domain_well_known}`
|
respond `dh=bd67bb4659b662a5ee2b1b043e7b3171b2cb44bd`
|
||||||
}
|
}
|
||||||
|
|
||||||
handle {
|
handle {
|
||||||
|
|
|
@ -11,11 +11,15 @@ in
|
||||||
enable = true;
|
enable = true;
|
||||||
interfaces = {
|
interfaces = {
|
||||||
wg0 = {
|
wg0 = {
|
||||||
inherit (peers."${config.networking.hostName}") ips listenPort;
|
ips = [
|
||||||
|
"10.8.1.4/24"
|
||||||
|
"fdd9:69ae:9703::4/64"
|
||||||
|
];
|
||||||
|
listenPort = 51821;
|
||||||
privateKeyFile = "/etc/wireguard/private.key";
|
privateKeyFile = "/etc/wireguard/private.key";
|
||||||
generatePrivateKeyFile = true;
|
generatePrivateKeyFile = true;
|
||||||
peers = with peers; [
|
peers = with peers; [
|
||||||
Proxy.peer
|
Proxy
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
|
@ -11,11 +11,15 @@ in
|
||||||
enable = true;
|
enable = true;
|
||||||
interfaces = {
|
interfaces = {
|
||||||
wg0 = {
|
wg0 = {
|
||||||
inherit (peers."${config.networking.hostName}") ips listenPort;
|
ips = [
|
||||||
|
"10.8.1.2/24"
|
||||||
|
"fdd9:69ae:9703::2/64"
|
||||||
|
];
|
||||||
|
listenPort = 51821;
|
||||||
privateKeyFile = "/etc/wireguard/private.key";
|
privateKeyFile = "/etc/wireguard/private.key";
|
||||||
generatePrivateKeyFile = true;
|
generatePrivateKeyFile = true;
|
||||||
peers = with peers; [
|
peers = with peers; [
|
||||||
Proxy.peer
|
Proxy
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
BIN
secrets.nix
BIN
secrets.nix
Binary file not shown.
Loading…
Reference in a new issue