asmir/nixos_flake_config
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixy/wireguard: add client

Browse Source
This commit is contained in:
Asmir A 2024-04-04 21:31:53 +02:00
parent e5412509cb
commit 1645789022
Signed by: asmir
GPG Key ID: 020C42B7A9ABA3E2
1 changed files with 28 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
nixy/configuration.nix
View File

@ -22,6 +22,10 @@
group = config.users.users.nobody.group; group = config.users.users.nobody.group;
}; };
sops.secrets."wg_privkey" = {
sopsFile = ./secrets/wg_privkey.yaml;
};
nix = { nix = {
optimise.automatic = true; optimise.automatic = true;
gc.automatic = true; gc.automatic = true;
@ -76,7 +80,7 @@
networking = { networking = {
firewall = { firewall = {
enable = true; enable = true;
allowedTCPPorts = [80 443]; allowedTCPPorts = [80 443 51820];
}; };
hostName = "nixy"; hostName = "nixy";
@ -108,6 +112,22 @@
}; };
}; };
}; };
wireguard.interfaces = {
wg0 = {
ips = ["10.100.0.6/24"];
listenPort = 51820;
privateKeyFile = config.sops.secrets."wg_privkey".path;
peers = [
{
publicKey = builtins.readFile ../magpie/wg_pubkey;
allowedIPs = ["10.100.0.1"];
endpoint = "5.75.229.224:51820";
persistentKeepalive = 25;
}
];
};
};
}; };
time.timeZone = "Europe/Sarajevo"; time.timeZone = "Europe/Sarajevo";