28 lines
687 B
Nix
28 lines
687 B
Nix
|
{ config, pkgs, lib, ... }:
|
||
|
|
{
|
||
|
|
environment.systemPackages = [ pkgs.wireguard pkgs.mosh ];
|
||
|
|
networking.nat = {
|
||
|
|
enable = true;
|
||
|
|
externalInterface = "ens3";
|
||
|
|
internalInterfaces = [ "wg0" ];
|
||
|
|
};
|
||
|
|
networking.firewall = {
|
||
|
|
allowedUDPPorts = [ 60990 ];
|
||
|
|
};
|
||
|
|
|
||
|
|
networking.wireguard.interfaces.wg0 = {
|
||
|
|
ips = [ "10.0.69.1/24" ];
|
||
|
|
listenPort = 60990;
|
||
|
|
privateKeyFile = "/var/lib/wireguard/priv";
|
||
|
|
peers = [{ # bowl
|
||
|
|
publicKey = "EzvDUmHXo95S2jKRv/LkH5ItUNOBgM7aQQsaq1WfCRw=";
|
||
|
|
allowedIPs = [ "10.0.69.2/32" ];
|
||
|
|
}
|
||
|
|
{ # line
|
||
|
|
publicKey = "ViRabGV2Mv0SZUVWnoAUhIzaHEvqRXAZJLq3Bp1oN1k=";
|
||
|
|
allowedIPs = [ "10.0.69.3/32" ];
|
||
|
|
}
|
||
|
|
];
|
||
|
|
};
|
||
|
|
}
|