converted to working wireguard module
This commit is contained in:
		
							parent
							
								
									c1650e57c8
								
							
						
					
					
						commit
						04490dceb8
					
				|  | @ -122,10 +122,10 @@ | |||
|             }; | ||||
|             suites = with profiles; rec { | ||||
|               base = [ core users.root users.anish ]; | ||||
|               sealight = [ base server ]; # matrix rsshub backup wireguard | ||||
|               mossnet = [ base server taskd wireguard-box shaarli wallabag dns backup monitoring nfs rss-bridge gonic headphones radicale ]; # hpi syncthing | ||||
|               sealight = [ base server ]; # matrix rsshub backup wireguard-server | ||||
|               mossnet = [ base server taskd wireguard-box shaarli wallabag dns monitoring nfs rss-bridge gonic headphones radicale ]; # hpi syncthing | ||||
|               cube = [ base site server ]; # backup | ||||
|               graphical = [ base bluetooth music sync wireguard wifi desktop ]; | ||||
|               graphical = [ base bluetooth music sync wifi desktop ]; | ||||
|               curve = [ graphical secrets ]; # backup? | ||||
|               work = [ base ]; | ||||
|             }; | ||||
|  |  | |||
|  | @ -32,4 +32,12 @@ | |||
|     # seafile? | ||||
|     # syncthing | ||||
|   }; | ||||
| 
 | ||||
|   #age.secrets.box-wg.file = "${self}/secrets/curve-wg.age"; | ||||
|   #age.secrets.box-wg.owner = "anish"; | ||||
|   #mossnet.wg = { | ||||
|   #  enable = true; | ||||
|   #  ips = [ "10.0.69.4/24" ]; | ||||
|   #  privateKeyFile = "/run/agenix/box-wg"; | ||||
|   #}; | ||||
| } | ||||
|  |  | |||
|  | @ -28,6 +28,14 @@ | |||
| 
 | ||||
|   boot.supportedFilesystems = [ "ntfs" ]; | ||||
| 
 | ||||
|   age.secrets.curve-wg.file = "${self}/secrets/curve-wg.age"; | ||||
|   age.secrets.curve-wg.owner = "anish"; | ||||
|   mossnet.wg = { | ||||
|     enable = true; | ||||
|     ips = [ "10.0.69.2/24" ]; | ||||
|     privateKeyFile = "/run/agenix/curve-wg"; | ||||
|   }; | ||||
| 
 | ||||
|   age.secrets.borg-password.file = "${self}/secrets/borg-password.age"; | ||||
|   mossnet.backup = { | ||||
|     enable = true; | ||||
|  |  | |||
|  | @ -6,7 +6,7 @@ in | |||
| { | ||||
|   options = { | ||||
|     mossnet.wg = { | ||||
|       enable = mkEnableOption "Gain access to all mossnet systems through wireguard, but only if it's already included in the server config"; | ||||
|       enable = mkEnableOption "Gain access to all mossnet systems through wireguard"; | ||||
|       ips = lib.mkOption { | ||||
|         type = with types; listOf str; | ||||
|         default = { }; | ||||
|  | @ -16,17 +16,17 @@ in | |||
|         description = '' | ||||
|           The IP this machine is allowed to connect to | ||||
|         ''; | ||||
|         privateKeyFile = lib.mkOption { | ||||
|           type = types.path; | ||||
|           default = { }; | ||||
|           example = literalExample '' | ||||
|             /run/agenix/wg-curve | ||||
|           ''; | ||||
|           description = '' | ||||
|             The private ssh key file to use to connect! | ||||
|             Remember set age.secrets.*.file and age.secrets.*.user | ||||
|           ''; | ||||
|         }; | ||||
|       }; | ||||
|       privateKeyFile = lib.mkOption { | ||||
|         type = types.path; | ||||
|         default = { }; | ||||
|         example = literalExample '' | ||||
|           /run/agenix/wg-curve | ||||
|         ''; | ||||
|         description = '' | ||||
|           The private ssh key file to use to connect! | ||||
|           Remember set age.secrets.*.file and age.secrets.*.user | ||||
|         ''; | ||||
|       }; | ||||
|     }; | ||||
|   }; | ||||
|  |  | |||
		Loading…
	
		Reference in a new issue