all: wireguard add preshared keys and update hierarchy

This commit is contained in:
2024-04-20 20:44:36 +02:00
parent dab24f0302
commit 871df5a514
3 changed files with 12 additions and 6 deletions

View File

@@ -24,8 +24,8 @@
sopsFile = ./secrets/wg_privkey.yaml;
};
sops.secrets."wg_preshared" = {
sopsFile = ./secrets/wg_preshared.yaml;
sops.secrets."wg_preshared/nixy" = {
sopsFile = ../common/secrets/wg_preshared.yaml;
};
sops.secrets."borgbase_enc_key" = {
@@ -133,7 +133,7 @@
peers = [
{
publicKey = builtins.readFile ../magpie/wg_pubkey;
presharedKeyFile = config.sops.secrets."wg_preshared".path;
presharedKeyFile = config.sops.secrets."wg_preshared/nixy".path;
allowedIPs = ["10.100.0.0/24"];
endpoint = "5.75.229.224:51820";
persistentKeepalive = 25;