# shared tinc file between client and server { config, pkgs, lib, ... }: { imports = [ ]; networking.firewall.trustedInterfaces = [ "tinc.private" ]; # nix-shell -p tinc_pre --run "tinc --config . generate-keys 4096" module.cluster.services.tinc = { "test" = { networkSubnet = "10.123.142.0/24"; extraConfig = '' LocalDiscovery = yes ''; privateEd25519KeyFile = toString ; privateRsaKeyFile = toString ; hosts = { server = { tincIp = "10.123.142.1"; publicKey = lib.fileContents ; }; client = { tincIp = "10.123.142.100"; publicKey = lib.fileContents ; }; }; }; }; }