fixed wireguard and added ausweisapp

This commit is contained in:
Rouven Seifert 2023-01-16 16:55:17 +01:00
parent bdccec49f1
commit dd10deec8c
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
4 changed files with 20 additions and 16 deletions

View file

@ -78,11 +78,11 @@
}, },
"nixpkgs": { "nixpkgs": {
"locked": { "locked": {
"lastModified": 1673704454, "lastModified": 1673800717,
"narHash": "sha256-5Wdj1MgdOgn3+dMFIBtg+IAYZApjF8JzwLWDPieg0C4=", "narHash": "sha256-SFHraUqLSu5cC6IxTprex/nTsI81ZQAtDvlBvGDWfnA=",
"owner": "nixos", "owner": "nixos",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "a83ed85c14fcf242653df6f4b0974b7e1c73c6c6", "rev": "2f9fd351ec37f5d479556cd48be4ca340da59b8f",
"type": "github" "type": "github"
}, },
"original": { "original": {

View file

@ -10,6 +10,7 @@
./modules/networks ./modules/networks
./modules/lightdm ./modules/lightdm
../../shared/vim.nix ../../shared/vim.nix
../../shared/ausweisapp.nix
../../shared/input.nix ../../shared/input.nix
../../shared/sops.nix ../../shared/sops.nix
../../shared/gpg.nix ../../shared/gpg.nix

View file

@ -99,20 +99,16 @@
}; };
networks."30-dorm" = { networks."30-dorm" = {
matchConfig.Name = "dorm"; matchConfig.Name = "dorm";
networkConfig = { addresses = [
{
addressConfig = {
Address = "10.10.10.3/24"; Address = "10.10.10.3/24";
DNS = "10.10.10.1"; RouteMetric = 30;
DNSDefaultRoute = true;
};
linkConfig = {
ActivationPolicy = "manual"; #manual activation cause sometimes the endpoint can't be resolved
}; };
}
];
routes = [ routes = [
# Somehow systemd-networkd always creates a route to 10.10.10.0/24 with metric 0 and regardless how I set it, { routeConfig = { Gateway = "0.0.0.0"; Destination = "192.168.10.0/24"; Metric = 30; }; }
# my settings are ignored and set to 0. Route below would do it right, as soon as I find out how I can deacivate
# the metric 0 one, this will be uncommented
#{ routeConfig = { Gateway = "0.0.0.0"; Destination = "10.10.10.0/24"; Metric = 50; }; }
{ routeConfig = { Gateway = "0.0.0.0"; Destination = "192.168.10.0/24"; Metric = 50; }; }
]; ];
}; };
}; };

7
shared/ausweisapp.nix Normal file
View file

@ -0,0 +1,7 @@
{ config, ... }:
{
programs.ausweisapp = {
enable = true;
openFirewall = true;
};
}