diff options
author | makefu <github@syntax-fehler.de> | 2022-09-23 23:45:15 +0200 |
---|---|---|
committer | makefu <github@syntax-fehler.de> | 2022-09-23 23:45:15 +0200 |
commit | 88a0d4cccd36bd90e9b23822cabbc3e8d2d49ee9 (patch) | |
tree | befe4b6b27a3798749fb53c61a836ac80547fefb | |
parent | 3dcd9f1b21caea8c9f1b99f801a48fe82d5a68af (diff) |
ma wireguard: add thierry wg setup
-rw-r--r-- | 2configs/wireguard/thierry.nix | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/2configs/wireguard/thierry.nix b/2configs/wireguard/thierry.nix new file mode 100644 index 000000000..f1dfef192 --- /dev/null +++ b/2configs/wireguard/thierry.nix @@ -0,0 +1,21 @@ +{ lib, ... }: +{ + networking.wireguard.interfaces.thierry-wg = { + ips = [ "172.27.66.10/24" ]; # TODO: not dnyamic + privateKeyFile = (toString <secrets>) + "/wg-thierry.key"; + allowedIPsAsRoutes = true; + # explicit route via eth0 to gum + peers = [ + { + endpoint = "thierryhome.duckdns.org:51820"; + allowedIPs = [ "172.27.66.0/24" ]; + publicKey = "filYuG/xbb2YW8WT0xT26rzeZ/ZiM6NLnbxbsCR9rS0="; + persistentKeepalive = 25; + } + #{ + # allowedIPs = [ "172.27.66.3/32" ]; + # publicKey = "cDIf14LH4qleXNo889lS2ATIqDx9r//JNCkhHlHgc1Q="; + #} + ]; + }; +} |