nix-config/hosts/traffic-stop-box/wireguard-client.nix

20 lines
506 B
Nix

{ config, pkgs, ... }:
{
networking.wg-quick.interfaces.wg-dvb = {
address = [ "10.13.37.${toString (config.deployment-dvb.systemNumber + 100)}/32" ];
privateKeyFile = config.sops.secrets.wg-seckey.path;
postUp = ''
${pkgs.iputils}/bin/ping -c 10 10.13.37.1 || true
'';
peers = [{
publicKey = "WDvCObJ0WgCCZ0ORV2q4sdXblBd8pOPZBmeWr97yphY=";
allowedIPs = [ "10.13.37.0/24" ];
endpoint = "81.201.149.152:51820";
persistentKeepalive = 25;
}];
};
}