feat: wireguard test

This commit is contained in:
Nick 2025-07-01 13:54:00 -05:00
parent 93366c81c8
commit c6ea717181
11 changed files with 26 additions and 22 deletions

7
systems/ceres/config/wireguard.nix Normal file → Executable file
View file

@ -1,6 +1,6 @@
{ config, flake, ... }:
let
inherit (flake.config.services.instances) wireGuard web;
inherit (flake.config.services.instances) wireGuard;
inherit (flake.config.machines.devices) mars ceres;
service = wireGuard;
in
@ -10,11 +10,12 @@ in
allowedUDPPorts = [
53
service.ports.port0
service.ports.port1
];
interfaces.wg0.allowedTCPPorts = [
80
443
8080
8888
];
};
@ -28,7 +29,7 @@ in
wireguard.interfaces = {
wg0 = {
ips = [ "${ceres.wireguard.ip0}/24" ];
listenPort = service.ports.port0;
listenPort = service.ports.port1;
privateKeyFile = config.sops.secrets."${service.name}-private".path;
peers = [
{