helm/modules/wireguard.nix

22 lines
589 B
Nix
Raw Permalink Normal View History

{ config, pkgs, ... }:
{
boot.extraModulePackages = with config.boot.kernelPackages; [ wireguard ];
environment.systemPackages = [ pkgs.wireguard ];
networking.wireguard.enable = true;
networking.wireguard.interfaces = {
wg0 = {
ips = [ "10.0.69.2/32" ];
privateKeyFile = "/var/lib/wireguard/priv";
peers = [
{ # helix - server
publicKey = "{c1J4p63rD3IlszugMZiki7UBV3YmDdqa3DU4UejXzAI=}";
allowedIPs = [ "10.0.69.1/24" ];
endpoint = "sealight.xyz:60990";
persistentKeepalive = 25;
} ];
};
};
}