upRootNutrition/dotfiles
1
0
Fork 0
mirror of https://gitlab.com/upRootNutrition/dotfiles.git synced 2025-08-08 12:54:38 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: wireguard test

Browse source
This commit is contained in:
Nick 2025-07-01 04:16:52 -05:00
parent dcee9dd99b
commit 737a72821d
1 changed files with 15 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

27
systems/ceres/config/wireguard.nix
View file

@ -40,24 +40,27 @@ in
}; };
}; };
sops.secrets = sops =
let let
sopsPath = secret: { sopsPath = secret: {
path = "${service.sops.path0}/${service.name}-${secret}"; path = "${service.sops.path0}/${service.name}-${secret}-pass";
owner = "root"; owner = "root";
mode = "600"; mode = "600";
}; };
in in
(map {
(secret: { secrets = builtins.listToAttrs (
name = "${service.name}-${secret}"; map
value = sopsPath secret; (secret: {
}) name = "${service.name}-${secret}";
[ value = sopsPath secret;
"private" })
"public" [
] "private"
); "public"
]
);
};
boot.kernel.sysctl = { boot.kernel.sysctl = {
"net.ipv4.ip_forward" = 1; "net.ipv4.ip_forward" = 1;