rouven.seifert/nixos-config
1
1
Fork 0
mirror of https://git.sr.ht/~rouven/nixos-config synced 2025-04-25 16:08:30 +02:00
Code Issues Projects Releases Packages Wiki Activity

added dorm wireguard

Browse source
This commit is contained in:
Rouven Seifert 2022-12-30 11:02:10 +01:00
parent 084aa31503
commit ad7938a056
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
2 changed files with 29 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

26
hosts/thinkpad/modules/networks/default.nix
View file

@ -2,12 +2,15 @@
{
imports = [ ./uni.nix ];
sops.secrets."wireless-env" = { };
sops.secrets = {
"wireless-env" = { };
"wireguard/dorm/private" = { };
"wireguard/dorm/preshared" = { };
};
networking = {
hostName = "thinkpad";
firewall = {
allowedUDPPorts = [ 51820 ]; # used for wireguard
checkReversePath = false;
#allowedUDPPorts = [ 51820 ]; # used for wireguard
};
wireless = {
enable = true;
@ -27,5 +30,22 @@
};
};
};
wg-quick.interfaces = {
Dorm = {
address = [ "10.10.10.3/32" ];
privateKeyFile = config.sops.secrets."wireguard/dorm/private".path;
listenPort = 51820;
dns = [ "192.168.10.1" ];
autostart = false;
peers = [
{
publicKey = "vUmworuJFHjB4KUdkucQ+nzqO2ysARLomq4UuK1n430=";
presharedKeyFile = config.sops.secrets."wireguard/dorm/preshared".path;
allowedIPs = [ "0.0.0.0/0" ];
endpoint = "dorm.vpn.rfive.de:51820";
}
];
};
};
};
}