helm/hosts/profiles/wireguard-server/default.nix

47 lines
1.1 KiB
Nix
Raw Normal View History

2022-09-18 15:13:50 -07:00
{ config, pkgs, lib, ... }:
{
environment.systemPackages = [ pkgs.wireguard-tools pkgs.mosh ];
networking.nat = {
enable = true;
externalInterface = "ens3";
internalInterfaces = [ "wg0" ];
};
networking.firewall = {
allowedUDPPorts = [ 60990 ];
};
networking.wireguard.interfaces.wg0 = {
ips = [ "10.0.69.1/24" ];
listenPort = 60990;
2022-10-03 06:59:21 -07:00
privateKeyFile = "/var/lib/wireguard/priv";
2022-09-18 15:13:50 -07:00
generatePrivateKeyFile = true; # TODO agenix secret
peers = [
{
# box
2024-01-05 23:44:08 -08:00
publicKey = "OnvVM1UaX0nmdohzSDyl90VKwd4VUpJZ+4oBpkkytwU=";
2022-09-18 15:13:50 -07:00
allowedIPs = [ "10.0.69.4/32" ];
}
{
# line
publicKey = "fsb1FuGmYi89p4CVXytKw2FYamONKtoanxrgs/dJjC8=";
allowedIPs = [ "10.0.69.3/32" ];
}
{
# curve
publicKey = "zkC7IzXX16i2ixqnRrPlUq2fD2/4noe84FlZBFaDBEE=";
2022-09-18 15:13:50 -07:00
allowedIPs = [ "10.0.69.2/32" ];
}
{
# helix
publicKey = "gcdq86hhEUlqF2chqYB/F8pALyAMNFvwLycxBoHuoDs=";
allowedIPs = [ "10.0.69.5/32" ];
}
# {
# # hyperplane
# publicKey = "";
# allowedIPs = [ "10.0.69.6/32" ];
# }
2022-09-18 15:13:50 -07:00
];
};
}