all: wireguard add preshared keys and update hierarchy

This commit is contained in:
2024-04-20 20:44:36 +02:00
parent dab24f0302
commit 871df5a514
3 changed files with 12 additions and 6 deletions

View File

@@ -300,8 +300,8 @@
sopsFile = ./secrets/wg_privkey.yaml;
};
sops.secrets."wg_preshared" = {
sopsFile = ./secrets/wg_preshared.yaml;
sops.secrets."wg_preshared/nixy" = {
sopsFile = ../common/secrets/wg_preshared.yaml;
};
sops.secrets."borgbase_enc_key" = {
@@ -346,11 +346,12 @@
peers = [
{
publicKey = builtins.readFile ../nixy/wg_pubkey;
presharedKeyFile = config.sops.secrets."wg_preshared".path;
presharedKeyFile = config.sops.secrets."wg_preshared/nixy".path;
allowedIPs = ["10.100.0.6/32"];
}
{
publicKey = builtins.readFile ../mediabox/wg_pubkey;
presharedKeyFile = config.sops.secrets."wg_preshared/mediabox".path;
allowedIPs = ["10.100.0.5/32"];
}
];