Compare commits
No commits in common. "71b040c7ef23323c41aa5a405f33e08fdaf9c3ee" and "e5eef474c633b62affd71595582743bcc60b117b" have entirely different histories.
71b040c7ef
...
e5eef474c6
|
@ -14,6 +14,24 @@
|
||||||
home.homeDirectory = "/Users/anishlakhwara";
|
home.homeDirectory = "/Users/anishlakhwara";
|
||||||
home.stateVersion = "22.05";
|
home.stateVersion = "22.05";
|
||||||
|
|
||||||
|
# networking.wg-quick.interfaces = {
|
||||||
|
# wg0 = {
|
||||||
|
# address = [ "10.0.69.7/24" ];
|
||||||
|
# listenPort = 60990; # to match firewall allowedUDPPorts (without this wg uses random port numbers)
|
||||||
|
# privateKeyFile = "/run/agenix/work-wg";
|
||||||
|
# peers = [
|
||||||
|
# # For a client configuration, one peer entry for the server will suffice.
|
||||||
|
# {
|
||||||
|
# publicKey = "c1J4p63rD3IlszugMZiki7UBV3YmDdqa3DU4UejXzAI=";
|
||||||
|
# allowedIPs = [ "10.0.69.0/24" ];
|
||||||
|
# # Set this to the server IP and port.
|
||||||
|
# endpoint = "sealight.xyz:60990"; # TODO: route to endpoint not automatically configured https://wiki.archlinux.org/index.php/WireGuard#Loop_routing https://discourse.nixos.org/t/solved-minimal-firewall-setup-for-wireguard-client/7577
|
||||||
|
# persistentKeepalive = 25;
|
||||||
|
# }
|
||||||
|
# ];
|
||||||
|
# };
|
||||||
|
# };
|
||||||
|
|
||||||
programs.zsh.initExtra = ''
|
programs.zsh.initExtra = ''
|
||||||
PATH=/Users/anishlakhwara/.sourcegraph/bin:/Users/anishlakhwara/.sourcegraph/sg.zsh_autocomplete:/Users/anishlakhwara/google-cloud-sdk/bin:/Users/anishlakhwara/google-cloud-sdk/completion.zsh.inc:/Users/anishlakhwara/google-cloud-sdk/path.zsh.inc:/Users/anishlakhwara/.sg:/opt/homebrew/bin:$PATH
|
PATH=/Users/anishlakhwara/.sourcegraph/bin:/Users/anishlakhwara/.sourcegraph/sg.zsh_autocomplete:/Users/anishlakhwara/google-cloud-sdk/bin:/Users/anishlakhwara/google-cloud-sdk/completion.zsh.inc:/Users/anishlakhwara/google-cloud-sdk/path.zsh.inc:/Users/anishlakhwara/.sg:/opt/homebrew/bin:$PATH
|
||||||
'';
|
'';
|
||||||
|
|
|
@ -131,7 +131,7 @@
|
||||||
programs.zsh = {
|
programs.zsh = {
|
||||||
enable = true;
|
enable = true;
|
||||||
enableCompletion = true;
|
enableCompletion = true;
|
||||||
autosuggestion.enable = false;
|
enableAutosuggestions = false;
|
||||||
|
|
||||||
initExtra = ''
|
initExtra = ''
|
||||||
bindkey -v
|
bindkey -v
|
||||||
|
|
|
@ -1,4 +1,4 @@
|
||||||
{ ... }:
|
{ pkgs, ... }:
|
||||||
|
|
||||||
{
|
{
|
||||||
homebrew.enable = true;
|
homebrew.enable = true;
|
||||||
|
|
|
@ -1,4 +1,4 @@
|
||||||
{ self, pkgs, config, ... }:
|
{ self, pkgs, ... }:
|
||||||
|
|
||||||
{
|
{
|
||||||
imports = [
|
imports = [
|
||||||
|
@ -18,27 +18,25 @@
|
||||||
pkgs.kubernetes-helm
|
pkgs.kubernetes-helm
|
||||||
];
|
];
|
||||||
|
|
||||||
age.identityPaths = [ "/Users/anishlakhwara/.ssh/id_ed25519" ];
|
# age.secrets.curve-wg.file = "${self}/secrets/work-wg.age";
|
||||||
age.secrets.work-wg.file = "${self}/secrets/work-wg.age";
|
# age.secrets.curve-wg.owner = "anishlakhwara";
|
||||||
age.secrets.work-wg.owner = "anishlakhwara";
|
# networking.wg-quick.interfaces = {
|
||||||
networking.wg-quick.interfaces = {
|
# wg0 = {
|
||||||
wg0 = {
|
# address = [ "10.0.69.7/24" ];
|
||||||
address = [ "10.0.69.7/24" ];
|
# listenPort = 60990; # to match firewall allowedUDPPorts (without this wg uses random port numbers)
|
||||||
listenPort = 60990; # to match firewall allowedUDPPorts (without this wg uses random port numbers)
|
# privateKeyFile = "/run/agenix/work-wg";
|
||||||
privateKeyFile = config.age.secrets.work-wg.path;
|
# peers = [
|
||||||
dns = [ "10.0.69.4" ];
|
# # For a client configuration, one peer entry for the server will suffice.
|
||||||
peers = [
|
# {
|
||||||
# For a client configuration, one peer entry for the server will suffice.
|
# publicKey = "c1J4p63rD3IlszugMZiki7UBV3YmDdqa3DU4UejXzAI=";
|
||||||
{
|
# allowedIPs = [ "10.0.69.0/24" ];
|
||||||
publicKey = "c1J4p63rD3IlszugMZiki7UBV3YmDdqa3DU4UejXzAI=";
|
# # Set this to the server IP and port.
|
||||||
allowedIPs = [ "10.0.69.0/24" ];
|
# endpoint = "sealight.xyz:60990"; # ToDo: route to endpoint not automatically configured https://wiki.archlinux.org/index.php/WireGuard#Loop_routing https://discourse.nixos.org/t/solved-minimal-firewall-setup-for-wireguard-client/7577
|
||||||
# Set this to the server IP and port.
|
# persistentKeepalive = 25;
|
||||||
endpoint = "sealight.xyz:60990"; # ToDo: route to endpoint not automatically configured https://wiki.archlinux.org/index.php/WireGuard#Loop_routing https://discourse.nixos.org/t/solved-minimal-firewall-setup-for-wireguard-client/7577
|
# }
|
||||||
persistentKeepalive = 25;
|
# ];
|
||||||
}
|
# };
|
||||||
];
|
# };
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
# Auto upgrade nix package and the daemon service.
|
# Auto upgrade nix package and the daemon service.
|
||||||
services.nix-daemon.enable = true;
|
services.nix-daemon.enable = true;
|
||||||
|
|
Loading…
Reference in a new issue