all: wireguard add preshared keys and update hierarchy
This commit is contained in:
@@ -300,8 +300,8 @@
|
||||
sopsFile = ./secrets/wg_privkey.yaml;
|
||||
};
|
||||
|
||||
sops.secrets."wg_preshared" = {
|
||||
sopsFile = ./secrets/wg_preshared.yaml;
|
||||
sops.secrets."wg_preshared/nixy" = {
|
||||
sopsFile = ../common/secrets/wg_preshared.yaml;
|
||||
};
|
||||
|
||||
sops.secrets."borgbase_enc_key" = {
|
||||
@@ -346,11 +346,12 @@
|
||||
peers = [
|
||||
{
|
||||
publicKey = builtins.readFile ../nixy/wg_pubkey;
|
||||
presharedKeyFile = config.sops.secrets."wg_preshared".path;
|
||||
presharedKeyFile = config.sops.secrets."wg_preshared/nixy".path;
|
||||
allowedIPs = ["10.100.0.6/32"];
|
||||
}
|
||||
{
|
||||
publicKey = builtins.readFile ../mediabox/wg_pubkey;
|
||||
presharedKeyFile = config.sops.secrets."wg_preshared/mediabox".path;
|
||||
allowedIPs = ["10.100.0.5/32"];
|
||||
}
|
||||
];
|
||||
|
||||
Reference in New Issue
Block a user