summaryrefslogtreecommitdiffstats
path: root/makefu/2configs/wireguard
diff options
context:
space:
mode:
authormakefu <github@syntax-fehler.de>2022-09-23 23:45:15 +0200
committermakefu <github@syntax-fehler.de>2022-09-23 23:45:15 +0200
commit9c949ce58187c1fe9ca91ae4aac1901e74df8bc7 (patch)
tree8fabf5af06446f62802f737d0c1554b225d63d7f /makefu/2configs/wireguard
parentbdcae6e2749e7b25b2814c76cd52184a51df9670 (diff)
ma wireguard: add thierry wg setup
Diffstat (limited to 'makefu/2configs/wireguard')
-rw-r--r--makefu/2configs/wireguard/thierry.nix21
1 files changed, 21 insertions, 0 deletions
diff --git a/makefu/2configs/wireguard/thierry.nix b/makefu/2configs/wireguard/thierry.nix
new file mode 100644
index 000000000..f1dfef192
--- /dev/null
+++ b/makefu/2configs/wireguard/thierry.nix
@@ -0,0 +1,21 @@
+{ lib, ... }:
+{
+ networking.wireguard.interfaces.thierry-wg = {
+ ips = [ "172.27.66.10/24" ]; # TODO: not dnyamic
+ privateKeyFile = (toString <secrets>) + "/wg-thierry.key";
+ allowedIPsAsRoutes = true;
+ # explicit route via eth0 to gum
+ peers = [
+ {
+ endpoint = "thierryhome.duckdns.org:51820";
+ allowedIPs = [ "172.27.66.0/24" ];
+ publicKey = "filYuG/xbb2YW8WT0xT26rzeZ/ZiM6NLnbxbsCR9rS0=";
+ persistentKeepalive = 25;
+ }
+ #{
+ # allowedIPs = [ "172.27.66.3/32" ];
+ # publicKey = "cDIf14LH4qleXNo889lS2ATIqDx9r//JNCkhHlHgc1Q=";
+ #}
+ ];
+ };
+}