Luj/snowfield
1
0
Fork 0
mirror of https://github.com/JulienMalka/snowfield.git synced 2025-03-26 05:40:52 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: wireguard tunnel from gustave to lisac

Browse source
This commit is contained in:
Julien Malka 2024-05-25 19:25:49 +02:00
parent 0e89853f1b
commit d98e6c98b9
Signed by: Luj
GPG key ID: 6FC74C847011FD83
1 changed files with 42 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

42
machines/gustave/default.nix
View file

@ -29,6 +29,45 @@
linkConfig.RequiredForOnline = "routable";
};
systemd.network.netdevs = {
"20-wg0" = {
netdevConfig = {
Kind = "wireguard";
Name = "wg0";
MTUBytes = "1300";
};
wireguardConfig = {
PrivateKeyFile = "/srv/wg-private";
ListenPort = 51820;
};
wireguardPeers = [
{
wireguardPeerConfig = {
RouteMetric = 2000;
PublicKey = "oYsN1Qy+a7dwVOKapN5s5KJOmhSflLHZqh+GLMeNpHw=";
AllowedIPs = [ "0.0.0.0/0" ];
Endpoint = "[2a01:e0a:5f9:9681:5880:c9ff:fe9f:3dfb]:51821";
PersistentKeepalive = 25;
};
}
];
};
};
systemd.network.networks."30-wg0" = {
matchConfig.Name = "wg0";
addresses = [
{
addressConfig.Address = "10.100.45.2/24";
addressConfig.AddPrefixRoute = false;
}
];
DHCP = "no";
gateway = [ "10.100.45.1" ];
networkConfig = {
IPv6AcceptRA = false;
};
};
# Set your time zone.
time.timeZone = "Europe/Paris";
@ -65,5 +104,8 @@
};
luj.deluge.interface = "wg0";
networking.firewall.allowedTCPPorts = [ 51820 ];
networking.firewall.allowedUDPPorts = [ 51820 ];
system.stateVersion = "23.11";
}