dadada/nix-config
dadada/nix-config
1
0
Fork 0
Code Issues 2 Pull requests 5 Projects Releases Packages Wiki Activity Actions 1

add pruflas vpn

Browse source
This commit is contained in:
Tim Schubert 2022-10-07 19:18:48 +02:00
parent fda6dd5da2
commit 7f36dee66b
Signed by: dadada
GPG key ID: EEB8D1CE62C4DFEA
4 changed files with 53 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

31
nixos/pruflas/configuration.nix
View file

@ -3,7 +3,13 @@
, lib
, ...
}:
with lib; {
with lib;
let
secretsPath = config.dadada.secrets.path;
wg0PrivKey = "${config.networking.hostName}-wg0-key";
wg0PresharedKey = "${config.networking.hostName}-wg0-preshared-key";
in
{
imports = [ ./hardware-configuration.nix ];
networking.hostName = "pruflas";
@ -46,6 +52,27 @@ with lib; {
bs.enable = true;
};
age.secrets.${wg0PrivKey}.file = "${secretsPath}/${wg0PrivKey}.age";
age.secrets.${wg0PresharedKey}.file = "${secretsPath}/${wg0PresharedKey}.age";
networking.wireguard = {
enable = true;
interfaces.uwupn = {
allowedIPsAsRoutes = true;
privateKeyFile = config.age.secrets.${wg0PrivKey}.path;
ips = [ "10.11.0.39/32" "fc00:1337:dead:beef::10.11.0.39/128" ];
peers = [
{
publicKey = "tuoiOWqgHz/lrgTcLjX+xIhvxh9jDH6gmDw2ZMvX5T8=";
allowedIPs = [ "10.11.0.0/22" "fc00:1337:dead:beef::10.11.0.0/118" "192.168.178.0/23" ];
endpoint = "53c70r.de:51820";
persistentKeepalive = 25;
presharedKeyFile = config.age.secrets.${wg0PresharedKey}.path;
}
];
};
};
networking.useDHCP = false;
networking.interfaces."enp0s25".useDHCP = true;
@ -105,6 +132,8 @@ with lib; {
users.mutableUsers = true;
dadada.networking.localResolver.enable = true;
dadada.networking.localResolver.uwu = true;
dadada.networking.localResolver.s0 = true;
dadada.autoUpgrade.enable = mkDefault true;