mirror of
https://gitlab.com/upRootNutrition/dotfiles.git
synced 2025-08-08 21:04:38 -05:00
feat: wireguard test
This commit is contained in:
parent
93366c81c8
commit
c6ea717181
11 changed files with 26 additions and 22 deletions
7
systems/ceres/config/wireguard.nix
Normal file → Executable file
7
systems/ceres/config/wireguard.nix
Normal file → Executable file
|
@ -1,6 +1,6 @@
|
|||
{ config, flake, ... }:
|
||||
let
|
||||
inherit (flake.config.services.instances) wireGuard web;
|
||||
inherit (flake.config.services.instances) wireGuard;
|
||||
inherit (flake.config.machines.devices) mars ceres;
|
||||
service = wireGuard;
|
||||
in
|
||||
|
@ -10,11 +10,12 @@ in
|
|||
allowedUDPPorts = [
|
||||
53
|
||||
service.ports.port0
|
||||
service.ports.port1
|
||||
];
|
||||
interfaces.wg0.allowedTCPPorts = [
|
||||
80
|
||||
443
|
||||
8080
|
||||
8888
|
||||
];
|
||||
};
|
||||
|
||||
|
@ -28,7 +29,7 @@ in
|
|||
wireguard.interfaces = {
|
||||
wg0 = {
|
||||
ips = [ "${ceres.wireguard.ip0}/24" ];
|
||||
listenPort = service.ports.port0;
|
||||
listenPort = service.ports.port1;
|
||||
privateKeyFile = config.sops.secrets."${service.name}-private".path;
|
||||
peers = [
|
||||
{
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue