maralorn/nixos-config
1
0
Fork 0
Code Wiki Activity

Add wireguard config

Browse source
This commit is contained in:
Malte Brandy 2018-07-27 13:09:00 +02:00
parent 59e3fef8e2
commit e67dd88e03
No known key found for this signature in database
GPG key ID: 226A2D41EF5378C9
4 changed files with 32 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
common/secret/default.nix
View file

Binary file not shown.

BIN
common/secret/wireguard-psk Normal file
View file

Binary file not shown.

17
hosts/apollo/configuration.nix
View file

@ -3,7 +3,8 @@
# You need pw-files for every configured user in ./secret/pw-useralias for login to work.
let
inherit (config.m-0.private) me;
inherit (config.m-0.private) me wireguard;
inherit (config.m-0) hosts;
in {
imports = [
@ -16,6 +17,20 @@ imports = [
networking = {
hostName = "apollo";
wireguard.interfaces = {
wireguard = {
ips = [ "${hosts.apollo}/128" ];
privateKeyFile = "/etc/nixos/hosts/apollo/secret/wireguard-private";
peers = [
{
publicKey = wireguard.pub.hera;
allowedIPs = [ "::/0" ];
endpoint = "hera.m-0.eu:${wireguard.port}";
presharedKeyFile = "/etc/nixos/common/secret/wireguard-psk";
}
];
};
};
};
m-0 = {

17
hosts/hera/configuration.nix
View file

@ -3,7 +3,8 @@
# You need pw-files for every configured user in ./secret/pw-useralias for login to work.
let
me = config.m-0.private.me;
inherit (config.m-0.private) me wireguard;
inherit (config.m-0) hosts;
unstable-pkgs = import <unstable> {};
in {
@ -31,6 +32,20 @@ networking = {
ipv6.addresses = [{ address = config.m-0.hosts.hera-intern; prefixLength = 112; }];
};
nameservers = [ "213.136.95.10" "2a02:c207::1:53" "2a02:c207::2:53" ];
wireguard.interfaces = {
wireguard = {
ips = [ "${hosts.hera}/128" ];
privateKeyFile = "/etc/nixos/hosts/hera/secret/wireguard-private";
listenPort = wireguard.port;
peers = [
{
publicKey = wireguard.pub.apollo;
allowedIPs = [ "${hosts.apollo}::/120" ];
presharedKeyFile = "/etc/nixos/common/secret/wireguard-psk";
}
];
};
};
};
nixpkgs.config.packageOverrides = pkgs: {