39 lines
954 B
Nix
39 lines
954 B
Nix
{ config, registry, ... }:
|
|
{
|
|
boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
|
|
|
|
networking.firewall.allowedUDPPorts = [ registry.publicWireguardEndpoint.port ];
|
|
|
|
deployment-TLMS.net.wg = {
|
|
prefix4 = 24;
|
|
privateKeyFile = config.sops.secrets.wg-seckey.path;
|
|
extraPeers = [
|
|
{
|
|
# Tassilo
|
|
publicKey = "vgo3le9xrFsIbbDZsAhQZpIlX+TuWjfEyUcwkoqUl2Y=";
|
|
addr4 = "10.13.37.2";
|
|
}
|
|
{
|
|
# oxa
|
|
publicKey = "QbaQaGqudRXIh03IbBNATfBZfpMLmwihlwLs6W9+P1c=";
|
|
addr4 = "10.13.37.3";
|
|
}
|
|
{
|
|
# marenz
|
|
publicKey = "XJddbPj6Zdtn4roi6UWGuR2EA81juMmlaUOuMSLi2FM=";
|
|
addr4 = "10.13.37.4";
|
|
}
|
|
{
|
|
# marcel
|
|
publicKey = "RMdb+UDvE6mH8UKzfLZGiZfzguGLrmAoUTS7JmBFNmg=";
|
|
addr4 = "10.13.37.6";
|
|
}
|
|
{
|
|
# clarity
|
|
publicKey = "WFRZB+BmADZFZpzswTseaVBAnNH9ulfMPdS5bDQp1UA=";
|
|
addr4 = "10.13.37.10";
|
|
}
|
|
];
|
|
};
|
|
}
|