Compare commits

..

No commits in common. "71b040c7ef23323c41aa5a405f33e08fdaf9c3ee" and "e5eef474c633b62affd71595582743bcc60b117b" have entirely different histories.

4 changed files with 40 additions and 24 deletions

View file

@ -14,6 +14,24 @@
home.homeDirectory = "/Users/anishlakhwara"; home.homeDirectory = "/Users/anishlakhwara";
home.stateVersion = "22.05"; home.stateVersion = "22.05";
# networking.wg-quick.interfaces = {
# wg0 = {
# address = [ "10.0.69.7/24" ];
# listenPort = 60990; # to match firewall allowedUDPPorts (without this wg uses random port numbers)
# privateKeyFile = "/run/agenix/work-wg";
# peers = [
# # For a client configuration, one peer entry for the server will suffice.
# {
# publicKey = "c1J4p63rD3IlszugMZiki7UBV3YmDdqa3DU4UejXzAI=";
# allowedIPs = [ "10.0.69.0/24" ];
# # Set this to the server IP and port.
# endpoint = "sealight.xyz:60990"; # TODO: route to endpoint not automatically configured https://wiki.archlinux.org/index.php/WireGuard#Loop_routing https://discourse.nixos.org/t/solved-minimal-firewall-setup-for-wireguard-client/7577
# persistentKeepalive = 25;
# }
# ];
# };
# };
programs.zsh.initExtra = '' programs.zsh.initExtra = ''
PATH=/Users/anishlakhwara/.sourcegraph/bin:/Users/anishlakhwara/.sourcegraph/sg.zsh_autocomplete:/Users/anishlakhwara/google-cloud-sdk/bin:/Users/anishlakhwara/google-cloud-sdk/completion.zsh.inc:/Users/anishlakhwara/google-cloud-sdk/path.zsh.inc:/Users/anishlakhwara/.sg:/opt/homebrew/bin:$PATH PATH=/Users/anishlakhwara/.sourcegraph/bin:/Users/anishlakhwara/.sourcegraph/sg.zsh_autocomplete:/Users/anishlakhwara/google-cloud-sdk/bin:/Users/anishlakhwara/google-cloud-sdk/completion.zsh.inc:/Users/anishlakhwara/google-cloud-sdk/path.zsh.inc:/Users/anishlakhwara/.sg:/opt/homebrew/bin:$PATH
''; '';

View file

@ -131,7 +131,7 @@
programs.zsh = { programs.zsh = {
enable = true; enable = true;
enableCompletion = true; enableCompletion = true;
autosuggestion.enable = false; enableAutosuggestions = false;
initExtra = '' initExtra = ''
bindkey -v bindkey -v

View file

@ -1,4 +1,4 @@
{ ... }: { pkgs, ... }:
{ {
homebrew.enable = true; homebrew.enable = true;

View file

@ -1,4 +1,4 @@
{ self, pkgs, config, ... }: { self, pkgs, ... }:
{ {
imports = [ imports = [
@ -18,27 +18,25 @@
pkgs.kubernetes-helm pkgs.kubernetes-helm
]; ];
age.identityPaths = [ "/Users/anishlakhwara/.ssh/id_ed25519" ]; # age.secrets.curve-wg.file = "${self}/secrets/work-wg.age";
age.secrets.work-wg.file = "${self}/secrets/work-wg.age"; # age.secrets.curve-wg.owner = "anishlakhwara";
age.secrets.work-wg.owner = "anishlakhwara"; # networking.wg-quick.interfaces = {
networking.wg-quick.interfaces = { # wg0 = {
wg0 = { # address = [ "10.0.69.7/24" ];
address = [ "10.0.69.7/24" ]; # listenPort = 60990; # to match firewall allowedUDPPorts (without this wg uses random port numbers)
listenPort = 60990; # to match firewall allowedUDPPorts (without this wg uses random port numbers) # privateKeyFile = "/run/agenix/work-wg";
privateKeyFile = config.age.secrets.work-wg.path; # peers = [
dns = [ "10.0.69.4" ]; # # For a client configuration, one peer entry for the server will suffice.
peers = [ # {
# For a client configuration, one peer entry for the server will suffice. # publicKey = "c1J4p63rD3IlszugMZiki7UBV3YmDdqa3DU4UejXzAI=";
{ # allowedIPs = [ "10.0.69.0/24" ];
publicKey = "c1J4p63rD3IlszugMZiki7UBV3YmDdqa3DU4UejXzAI="; # # Set this to the server IP and port.
allowedIPs = [ "10.0.69.0/24" ]; # endpoint = "sealight.xyz:60990"; # ToDo: route to endpoint not automatically configured https://wiki.archlinux.org/index.php/WireGuard#Loop_routing https://discourse.nixos.org/t/solved-minimal-firewall-setup-for-wireguard-client/7577
# Set this to the server IP and port. # persistentKeepalive = 25;
endpoint = "sealight.xyz:60990"; # ToDo: route to endpoint not automatically configured https://wiki.archlinux.org/index.php/WireGuard#Loop_routing https://discourse.nixos.org/t/solved-minimal-firewall-setup-for-wireguard-client/7577 # }
persistentKeepalive = 25; # ];
} # };
]; # };
};
};
# Auto upgrade nix package and the daemon service. # Auto upgrade nix package and the daemon service.
services.nix-daemon.enable = true; services.nix-daemon.enable = true;