nixy/wireguard: add preshared key
This commit is contained in:
parent
05fbfc7c70
commit
1f065c29be
@ -24,6 +24,10 @@
|
||||
sopsFile = ./secrets/wg_privkey.yaml;
|
||||
};
|
||||
|
||||
sops.secrets."wg_preshared" = {
|
||||
sopsFile = ./secrets/wg_preshared.yaml;
|
||||
};
|
||||
|
||||
sops.secrets."borgbase_enc_key" = {
|
||||
sopsFile = ./secrets/borgbase_enc_key.yaml;
|
||||
owner = config.users.users.akill.name;
|
||||
@ -129,6 +133,7 @@
|
||||
peers = [
|
||||
{
|
||||
publicKey = builtins.readFile ../magpie/wg_pubkey;
|
||||
presharedKeyFile = config.sops.secrets."wg_preshared".path;
|
||||
allowedIPs = ["10.100.0.0/24"];
|
||||
endpoint = "5.75.229.224:51820";
|
||||
persistentKeepalive = 25;
|
||||
|
Loading…
Reference in New Issue
Block a user