switch wireguard configuration

This commit is contained in:
Ingolf Wagner 2024-04-07 17:58:36 +02:00
parent d6b2d305b5
commit 1a564f2369
No known key found for this signature in database
GPG key ID: 76BF5F1928B9618B
5 changed files with 3 additions and 5 deletions

View file

@ -4,7 +4,6 @@ with lib;
options.wireguard = {
wg0 = {
#ipv4 = mkOption { type = types.str; };
subnet = mkOption {
type = types.str;
default = "10.100.0.1/24";

View file

@ -18,7 +18,7 @@
# server
peers = [
{
# robi
# orbi
publicKey = "uWR93xJe5oEbX3DsAYpOS9CuSg1VmXEQxJzdlJpe3DU=";
allowedIPs = [ "10.100.0.1/24" ];
endpoint = "ingolf-wagner.de:51820";

View file

@ -21,7 +21,7 @@
#./nginx-wkd.nix
./network-tinc.nix
#./network-wireguard.nix
./network-wireguard.nix
./media-share.nix
#./media-jellyfin.nix

View file

@ -1,6 +1,5 @@
{ pkgs, config, ... }:
{
# networking.firewall.trustedInterfaces = [ "wg0" ];
networking.firewall.allowedUDPPorts = [ 51820 ];
sops.secrets.wireguard_private = { };
boot.kernel.sysctl."net.ipv4.ip_forward" = true;

View file

@ -20,7 +20,7 @@
./nginx-wkd.nix
./network-tinc.nix
./network-wireguard.nix
#./network-wireguard.nix
./media-share.nix
#./media-jellyfin.nix