Lillian-Violet/NixOS-Config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add wireguard config to all other hosts into wheatley and auto-enable

Browse source
This commit is contained in:
Lillian Violet 2024-12-06 19:42:52 +01:00
parent 733d98a446
commit 2a29f5587a
3 changed files with 66 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

22
nixos/hosts/EDI/configuration.nix
View file

@ -5,6 +5,7 @@
outputs,
lib,
pkgs,
config,
...
}: {
# You can import other NixOS modules here
@ -44,6 +45,27 @@
networking.hostName = "EDI";
sops.secrets."wg-private-key".mode = "0440";
sops.secrets."wg-private-key".owner = config.users.users.root.name;
networking.wireguard.enable = true;
networking.wg-quick.interfaces = {
wg0 = {
autostart = true;
dns = ["1.1.1.1"];
address = ["10.5.5.3/32"];
privateKeyFile = config.sops.secrets."wg-private-key".path;
peers = [
{
publicKey = "A02sO7uLdgflhPIRd0cbJONIaPP4z8HTxDkmX4NegFg=";
endpoint = "84.87.146.85:5181";
allowedIPs = ["10.47.47.0/24"];
}
];
};
};
# Lanzaboote currently replaces the systemd-boot module.
# This setting is usually set to true in configuration.nix
# generated at installation time. So we force it to false