switch wireguard configuration
This commit is contained in:
parent
d6b2d305b5
commit
1a564f2369
5 changed files with 3 additions and 5 deletions
|
@ -4,7 +4,6 @@ with lib;
|
|||
|
||||
options.wireguard = {
|
||||
wg0 = {
|
||||
#ipv4 = mkOption { type = types.str; };
|
||||
subnet = mkOption {
|
||||
type = types.str;
|
||||
default = "10.100.0.1/24";
|
||||
|
|
|
@ -18,7 +18,7 @@
|
|||
# server
|
||||
peers = [
|
||||
{
|
||||
# robi
|
||||
# orbi
|
||||
publicKey = "uWR93xJe5oEbX3DsAYpOS9CuSg1VmXEQxJzdlJpe3DU=";
|
||||
allowedIPs = [ "10.100.0.1/24" ];
|
||||
endpoint = "ingolf-wagner.de:51820";
|
||||
|
|
|
@ -21,7 +21,7 @@
|
|||
#./nginx-wkd.nix
|
||||
|
||||
./network-tinc.nix
|
||||
#./network-wireguard.nix
|
||||
./network-wireguard.nix
|
||||
|
||||
./media-share.nix
|
||||
#./media-jellyfin.nix
|
||||
|
|
|
@ -1,6 +1,5 @@
|
|||
{ pkgs, config, ... }:
|
||||
{
|
||||
# networking.firewall.trustedInterfaces = [ "wg0" ];
|
||||
networking.firewall.allowedUDPPorts = [ 51820 ];
|
||||
sops.secrets.wireguard_private = { };
|
||||
boot.kernel.sysctl."net.ipv4.ip_forward" = true;
|
||||
|
|
|
@ -20,7 +20,7 @@
|
|||
./nginx-wkd.nix
|
||||
|
||||
./network-tinc.nix
|
||||
./network-wireguard.nix
|
||||
#./network-wireguard.nix
|
||||
|
||||
./media-share.nix
|
||||
#./media-jellyfin.nix
|
||||
|
|
Loading…
Reference in a new issue