fabianhauser/dotfiles
1
0
Fork 0
Code Issues 4 Pull requests 1 Projects Releases Packages Wiki Activity Actions

Extract wireguard configuration tools to library

Browse source
This commit is contained in:
Fabian Hauser 2020-11-29 13:02:05 +00:00
parent 03907d416d
commit 155c01b9c1
5 changed files with 36 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

31
host/montalin/applications/vpn.nix
View file

@ -3,38 +3,9 @@ let
meta = import ../../../meta;
network = meta.network.virtual;
networkName = "mgmt";
networkConfig = network.${networkName};
hostName = config.networking.hostName;
in {
networking.wireguard.enable = true;
networking.wireguard.interfaces = {
"wg-${networkName}" = {
ips = [
"${networkConfig.hosts.${hostName}.v4.ip}/${
toString networkConfig.v4.bitmask
}"
];
privateKeyFile = "/secrets/wireguard/private/${networkName}";
generatePrivateKeyFile = true;
peers = let
mapHostToPeerConfig = (host: netconf: {
# Generate the preshared key with wg genpsk
presharedKeyFile =
"/secrets/wireguard/preshared/${networkName}-${host}";
publicKey = netconf.publicKey;
endpoint = netconf.endpoint;
allowedIPs = [ netconf.v4.ip ];
persistantKeepalive = netconf.persistentKeepalive;
});
reachablePeerHosts = lib.filterAttrs (host: netconf:
host != hostName
&& (netconf.endpoint != null || networkConfig.server == hostName))
networkConfig.hosts;
in lib.mapAttrsToList mapHostToPeerConfig reachablePeerHosts;
};
"wg-${networkName}" = pkgs.lib.qois.wireguard.makeInterface config.networking.hostName networkName network.${networkName};
};
}