dump-dvb/nix-config
dump-dvb/nix-config
3
0
Fork 0
mirror of https://github.com/dump-dvb/nix-config.git synced 2024-06-14 20:06:57 +02:00
Code Issues Projects Releases Wiki Activity

add staging maschine to wireguard

Browse Source
This commit is contained in:
Tassilo - 2022-05-15 17:05:47 +02:00
parent d3dd1ee174
commit 5c374686ec
Signed by: revol-xut
GPG Key ID: 4F56FF7759627D07
3 changed files with 29 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
flake.nix
View File

@ -142,7 +142,6 @@
data-hoarder-modules = [
./modules/data-accumulator.nix
./modules/nginx.nix
./modules/wireguard_server.nix
./modules/public_api.nix
./modules/map.nix
./modules/file_sharing.nix
@ -189,6 +188,7 @@
specialArgs = { inherit inputs; };
modules = ([
./hosts/data-hoarder/configuration.nix
./modules/wireguard_server.nix
] ++ data-hoarder-modules);
};
staging-data-hoarder = nixpkgs.lib.nixosSystem {
@ -196,6 +196,7 @@
specialArgs = { inherit inputs; };
modules = ([
./hosts/staging/configuration.nix
./modules/wireguard_staging.nix
microvm.nixosModules.microvm
] ++ data-hoarder-modules);
};

6
modules/wireguard_server.nix
View File

@ -22,6 +22,12 @@
allowedIPs = [ "10.13.37.3/32" ];
persistentKeepalive = 25;
}
# data hoarder staging
{
publicKey = "sDiukhk4m+efHc/i1brao0ztnOM1ZipmgTmg8q9kZGQ=";
allowedIPs = [ "10.13.37.5/32" ];
persistentKeepalive = 25;
}
{
# traffic-stop-box-0
publicKey = "qyStvzZdoqcjJJQckw4ZwvsQUa+8TBWtnsRxURqanno=";

21
modules/wireguard_staging.nix Normal file
View File

@ -0,0 +1,21 @@
{ config, pkgs, ... }:
{
networking.firewall.allowedUDPPorts = [ 51820 ];
networking.wg-quick.interfaces.wg-dvb = {
address = [ "10.13.37.5/32" ];
privateKeyFile = "/root/wg-seckey";
postUp = ''
${pkgs.iputils}/bin/ping -c 10 10.13.37.1 || true
'';
peers = [{
publicKey = "WDvCObJ0WgCCZ0ORV2q4sdXblBd8pOPZBmeWr97yphY=";
allowedIPs = [ "10.13.37.0/24" ];
endpoint = "academicstrokes.com:51820";
persistentKeepalive = 25;
}];
};
}