palo/nixos-config
palo/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

switch wireguard configuration

Browse source
This commit is contained in:
Ingolf Wagner 2024-04-07 17:58:36 +02:00
parent d6b2d305b5
commit 1a564f2369
No known key found for this signature in database
GPG key ID: 76BF5F1928B9618B
5 changed files with 3 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
nixos/components/network/wireguard.nix
View file

@ -4,7 +4,6 @@ with lib;
options.wireguard = { options.wireguard = {
wg0 = { wg0 = {
#ipv4 = mkOption { type = types.str; };
subnet = mkOption { subnet = mkOption {
type = types.str; type = types.str;
default = "10.100.0.1/24"; default = "10.100.0.1/24";

2
nixos/machines/chungus/network-wireguard.nix
View file

@ -18,7 +18,7 @@
# server # server
peers = [ peers = [
{ {
# robi # orbi
publicKey = "uWR93xJe5oEbX3DsAYpOS9CuSg1VmXEQxJzdlJpe3DU="; publicKey = "uWR93xJe5oEbX3DsAYpOS9CuSg1VmXEQxJzdlJpe3DU=";
allowedIPs = [ "10.100.0.1/24" ]; allowedIPs = [ "10.100.0.1/24" ];
endpoint = "ingolf-wagner.de:51820"; endpoint = "ingolf-wagner.de:51820";

2
nixos/machines/orbi/configuration.nix
View file

@ -21,7 +21,7 @@
#./nginx-wkd.nix #./nginx-wkd.nix
./network-tinc.nix ./network-tinc.nix
#./network-wireguard.nix ./network-wireguard.nix
./media-share.nix ./media-share.nix
#./media-jellyfin.nix #./media-jellyfin.nix

1
nixos/machines/orbi/network-wireguard.nix
View file

@ -1,6 +1,5 @@
{ pkgs, config, ... }: { pkgs, config, ... }:
{ {
# networking.firewall.trustedInterfaces = [ "wg0" ];
networking.firewall.allowedUDPPorts = [ 51820 ]; networking.firewall.allowedUDPPorts = [ 51820 ];
sops.secrets.wireguard_private = { }; sops.secrets.wireguard_private = { };
boot.kernel.sysctl."net.ipv4.ip_forward" = true; boot.kernel.sysctl."net.ipv4.ip_forward" = true;

2
nixos/machines/robi/configuration.nix
View file

@ -20,7 +20,7 @@
./nginx-wkd.nix ./nginx-wkd.nix
./network-tinc.nix ./network-tinc.nix
./network-wireguard.nix #./network-wireguard.nix
./media-share.nix ./media-share.nix
#./media-jellyfin.nix #./media-jellyfin.nix