diff options
Diffstat (limited to '2configs/wireguard/server.nix')
| -rw-r--r-- | 2configs/wireguard/server.nix | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/2configs/wireguard/server.nix b/2configs/wireguard/server.nix index bb3198178..426403df2 100644 --- a/2configs/wireguard/server.nix +++ b/2configs/wireguard/server.nix @@ -7,6 +7,9 @@ in { # wireguard server # boot.kernel.sysctl."net.ipv4.ip_forward" = 1; # conf.all.proxy_arp =1 + + sops.secrets."wireguard.key" = {}; + networking.firewall = { allowedUDPPorts = [ 51820 ]; }; @@ -20,7 +23,7 @@ in { # wireguard server networking.wireguard.interfaces.wg0 = { ips = [ "10.244.0.1/24" ]; listenPort = 51820; - privateKeyFile = (toString <secrets>) + "/wireguard.key"; + privateKeyFile = config.sops.secrets."wireguard.key".path; # allowedIPsAsRoutes = true; postSetup = '' ${pkgs.iptables}/bin/iptables -t nat -A POSTROUTING -s 10.244.0.0/24 -o ${ext-if} -j MASQUERADE |