adtya/configuration.nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

layne: test wireguard module

Browse source
This commit is contained in:
Adithya 2024-07-06 00:29:42 +05:30
parent 7471548c57
commit aae94c69ad
Signed by: adtya
GPG key ID: B8857BFBA2C47B9C
2 changed files with 20 additions and 25 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

35
hosts/layne/wireguard.nix
View file

@ -1,4 +1,6 @@
{ config, ... }: {
imports = [ ../shared/wireguard.nix ];
sops.secrets = {
"wireguard/layne/pk" = {
mode = "400";
@ -12,31 +14,14 @@
};
};
networking.firewall.trustedInterfaces = [ "wg0" ];
networking.wireguard = {
nodeconfig.wireguard = {
enable = true;
interfaces = {
wg0 = {
ips = [
"10.10.10.14/24"
"fd7c:585c:c4ae::14/64"
];
listenPort = 51834;
privateKeyFile = config.sops.secrets."wireguard/layne/pk".path;
peers = [
{
name = "Proxy";
endpoint = "165.232.180.97:51821";
publicKey = "NNw/iDMCTq8mpHncrecEh4UlvtINX/UUDtCJf2ToFR4=";
presharedKeyFile = config.sops.secrets."wireguard/layne/psk".path;
persistentKeepalive = 20;
allowedIPs = [
"10.10.10.0/24"
"fd7c:585c:c4ae::0/64"
];
}
];
};
};
listen-port = 51834;
pk-file = config.sops.secrets."wireguard/layne/pk".path;
psk-file = config.sops.secrets."wireguard/layne/psk".path;
node-ips = [
"10.10.10.14/24"
"fd7c:585c:c4ae::14/64"
];
};
}

10
hosts/shared/wireguard.nix Normal file
View file

@ -0,0 +1,10 @@
_: {
nodeconfig.wireguard = {
endpoint = "165.232.180.97:51821";
endpoint-publickey = "NNw/iDMCTq8mpHncrecEh4UlvtINX/UUDtCJf2ToFR4=";
allowed-ips = [
"10.10.10.0/24"
"fd7c:585c:c4ae::0/64"
];
};
}