From ff1177388bcb05a16338ef680aa4682d07b6a50e Mon Sep 17 00:00:00 2001 From: Anish Lakhwara Date: Tue, 4 Oct 2022 20:46:36 +1000 Subject: [PATCH] clean up a lil --- profiles/sealight-website/default.nix | 1 + profiles/wireguard-box/default.nix | 61 --------------------------- 2 files changed, 1 insertion(+), 61 deletions(-) delete mode 100644 profiles/wireguard-box/default.nix diff --git a/profiles/sealight-website/default.nix b/profiles/sealight-website/default.nix index e81bbf2b..a4fec9d6 100644 --- a/profiles/sealight-website/default.nix +++ b/profiles/sealight-website/default.nix @@ -1,4 +1,5 @@ { + # TODO add file/site to be deployed # services.nginx = { # enable = true; # virtualHosts = { diff --git a/profiles/wireguard-box/default.nix b/profiles/wireguard-box/default.nix deleted file mode 100644 index bc025571..00000000 --- a/profiles/wireguard-box/default.nix +++ /dev/null @@ -1,61 +0,0 @@ -{ config, pkgs, lib, ... }: - -{ - services.tailscale.enable = true; - networking.firewall.allowedUDPPorts = [ 60990 ]; - - # Enable WireGuard - networking.wireguard.interfaces = { - # "wg0" is the network interface name. You can name the interface arbitrarily. - wg0 = { - # Determines the IP address and subnet of the client's end of the tunnel interface. - ips = [ "10.0.69.4/24" ]; - listenPort = 60990; # to match firewall allowedUDPPorts (without this wg uses random port numbers) - - # Path to the private key file. - # - # Note: The private key can also be included inline via the privateKey option, - # but this makes the private key world-readable; thus, using privateKeyFile is - # recommended. - privateKeyFile = "/home/anish/wg/privkey"; - - peers = [ - # For a client configuration, one peer entry for the server will suffice. - { - # Public key of the server (not a file path). - publicKey = "c1J4p63rD3IlszugMZiki7UBV3YmDdqa3DU4UejXzAI="; - - # Forward all the traffic via VPN. - allowedIPs = [ "10.0.69.0/24" ]; - # Or forward only particular subnets - #allowedIPs = [ "10.100.0.1" "91.108.12.0/22" ]; - - # Set this to the server IP and port. - endpoint = "69.61.38.225:60990"; # ToDo: route to endpoint not automatically configured https://wiki.archlinux.org/index.php/WireGuard#Loop_routing https://discourse.nixos.org/t/solved-minimal-firewall-setup-for-wireguard-client/7577 - - # Send keepalives every 25 seconds. Important to keep NAT tables alive. - persistentKeepalive = 25; - } - ]; - }; - }; - - # boot.extraModulePackages = with config.boot.kernelPackages; [ wireguard ]; - # environment.systemPackages = [ pkgs.wireguard ]; - # networking.wireguard.enable = true; - # networking.wireguard.interfaces = { - # wg0 = { - # ips = [ "10.0.69.4/32" ]; - # privateKeyFile = "/home/anish/wg/privkey"; - # listenPort = 60990; - # - # peers = [ - # { # helix - server - # publicKey = "{c1J4p63rD3IlszugMZiki7UBV3YmDdqa3DU4UejXzAI=}"; - # allowedIPs = [ "10.0.69.1/24" ]; - # endpoint = "sealight.xyz:60990"; - # persistentKeepalive = 25; - # } ]; - # }; - # }; -}