dadada/nix-config
dadada/nix-config
1
0
Fork 0
Code Issues 2 Pull requests 5 Projects Releases Packages Wiki Activity Actions

enable forwarding on vpn

Browse source
This commit is contained in:
Tim Schubert 2022-04-27 19:30:58 +02:00
parent d415aa10be
commit b8f2c5c531
Signed by: dadada
GPG key ID: EEB8D1CE62C4DFEA
2 changed files with 27 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

36
nixos/modules/vpnServer.nix
View file

@ -1,4 +1,4 @@
{ config, lib, ... }:
{ config, pkgs, lib, ... }:
with lib;
let
@ -32,19 +32,27 @@ in
};
};
config = mkIf cfg.enable {
networking.wireguard.enable = true;
networking.wireguard.interfaces."wg0" = {
allowedIPsAsRoutes = true;
privateKeyFile = "/var/lib/wireguard/wg0-key";
ips = [ "fd42:9c3b:f96d:0200::0/64" ];
listenPort = 51234;
peers = map
(peer: (
{
allowedIPs = [ "fd42:9c3b:f96d:0200::${peer.id}/128" ];
publicKey = peer.key;
}))
(attrValues cfg.peers);
networking.wireguard = {
enable = true;
interfaces."wg0" = {
allowedIPsAsRoutes = true;
privateKeyFile = "/var/lib/wireguard/wg0-key";
ips = [ "fd42:9c3b:f96d:0200::0/64" ];
listenPort = 51234;
peers = map
(peer: (
{
allowedIPs = [ "fd42:9c3b:f96d:0200::${peer.id}/128" ];
publicKey = peer.key;
}))
(attrValues cfg.peers);
postSetup = ''
wg set wg0 fwmark 51234
ip rule add table 2468
ip route add default dev ens3 table 2468
ip route add fwmark 51234 table 2468
'';
};
};
};
}