Lillian-Violet/NixOS-Config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add wireguard vpn into wheatley

Browse source
This commit is contained in:
Lillian Violet 2024-12-06 19:16:11 +01:00
parent b88cb6f85e
commit 5966956e26
5 changed files with 47 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

32
nixos/hosts/wheatley/configuration.nix
View file

@ -138,9 +138,12 @@
sops.secrets."protonvpn-priv-key".mode = "0440";
sops.secrets."protonvpn-priv-key".owner = config.users.users.root.name;
sops.secrets."wg-private-key".mode = "0440";
sops.secrets."wg-private-key".owner = config.users.users.root.name;
networking.wireguard.enable = true;
# wg public key for host: A02sO7uLdgflhPIRd0cbJONIaPP4z8HTxDkmX4NegFg=
networking.wg-quick.interfaces = {
# "wg0" is the network interface name. You can name the interface arbitrarily.
wg0 = {
@ -171,6 +174,35 @@
}
];
};
wg1 = {
autostart = true;
address = ["10.5.5.1/24"];
listenPort = 51820;
privateKeyFile = config.sops.secrets."wg-private-key".path;
peers = [
{
#GLaDOS public key
publicKey = "yieF2yQptaE3jStoaGytUnN+HLxyVhFBZIUOGUNAV38=";
allowedIPs = ["10.5.5.2/32"];
}
{
#EDI public key
publicKey = "i4nDZbU+a2k5C20tFJRNPVE1vhYKJwhoqGHEdeC4704=";
allowedIPs = ["10.5.5.3/32"];
}
{
#Shodan public key
publicKey = "Zah2nZDaHF8jpP5AtMA5bhE7t38fMB2UHzbXAc96/jw=";
allowedIPs = ["10.5.5.4/32"];
}
{
#ADA public key
publicKey = "SHu7xxRVWuqp4U4uipMoITKrFPWZATGsJevUeqBSzWo=";
allowedIPs = ["10.5.5.5/32"];
}
];
};
};
networking.firewall = {