upRootNutrition/dotfiles
1
0
Fork 0
mirror of https://gitlab.com/upRootNutrition/dotfiles.git synced 2025-08-08 12:54:38 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: wireguard test

Browse source
This commit is contained in:
Nick 2025-07-01 04:16:52 -05:00
parent dcee9dd99b
commit 737a72821d
1 changed files with 15 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

9
systems/ceres/config/wireguard.nix
View file

@ -40,15 +40,17 @@ in
}; };
}; };
sops.secrets = sops =
let let
sopsPath = secret: { sopsPath = secret: {
path = "${service.sops.path0}/${service.name}-${secret}"; path = "${service.sops.path0}/${service.name}-${secret}-pass";
owner = "root"; owner = "root";
mode = "600"; mode = "600";
}; };
in in
(map {
secrets = builtins.listToAttrs (
map
(secret: { (secret: {
name = "${service.name}-${secret}"; name = "${service.name}-${secret}";
value = sopsPath secret; value = sopsPath secret;
@ -58,6 +60,7 @@ in
"public" "public"
] ]
); );
};
boot.kernel.sysctl = { boot.kernel.sysctl = {
"net.ipv4.ip_forward" = 1; "net.ipv4.ip_forward" = 1;