dadada/nix-config
dadada/nix-config
1
0
Fork 0
Code Issues 2 Pull requests 5 Projects Releases Packages Wiki Activity Actions

Update vpn config

Browse source
This commit is contained in:
Tim Schubert 2022-04-10 16:10:04 +02:00
parent f901a0f775
commit ec63b1c032
Signed by: dadada
GPG key ID: EEB8D1CE62C4DFEA
1 changed files with 3 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

20
nixos/modules/networking.nix
View file

@ -114,7 +114,7 @@ in
}));
networking.wireguard.interfaces = mkIf (cfg.vpnExtension != null) {
bs = {
dadada = {
ips = [ "fd42:9c3b:f96d:200::${cfg.vpnExtension}/64" ];
listenPort = 51234;
@ -124,7 +124,7 @@ in
{
publicKey = "lFB2DWtzp55ajV0Fk/OWdO9JlGvN9QsayYKQQHV3GEs=";
allowedIPs = [ "fd42:9c3b:f96d::/48" ];
endpoint = "bs.vpn.dadada.li:51234";
endpoint = "vpn.dadada.li:51234";
persistentKeepalive = 25;
}
];
@ -140,22 +140,8 @@ in
systemd.services.wg-reresolve-dns = mkIf (cfg.vpnExtension != null) {
serviceConfig.Type = "oneshot";
script = ''
${pkgs.wireguard-tools}/bin/wg set bs peer lFB2DWtzp55ajV0Fk/OWdO9JlGvN9QsayYKQQHV3GEs= endpoint bs.vpn.dadada.li:51234 persistent-keepalive 25 allowed-ips fd42:9c3b:f96d::/48
${pkgs.wireguard-tools}/bin/wg set dadada peer lFB2DWtzp55ajV0Fk/OWdO9JlGvN9QsayYKQQHV3GEs= endpoint vpn.dadada.li:51234 persistent-keepalive 25 allowed-ips fd42:9c3b:f96d::/48
'';
};
fileSystems."/mnt/media.dadada.li" = mkIf cfg.enableBsShare {
device = "media.dadada.li:/mnt/storage/share";
fsType = "nfs";
options = [ "x-systemd.automount" "noauto" "x-systemd.idle-timeout=600" ];
};
networking.firewall = {
enable = true;
allowedUDPPorts = [
51234 # Wireguard
5353 # mDNS
];
};
};
}