fabianhauser/dotfiles
1
0
Fork 0
Code Issues 4 Pull requests 1 Projects Releases Packages Wiki Activity Actions

Add wireguard VPN

Browse source
This commit is contained in:
Fabian Hauser 2020-11-28 20:46:59 +00:00
parent 120cec699d
commit 80a70002e9
2 changed files with 31 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
host/montalin/applications/default.nix
View file

@ -3,8 +3,8 @@
imports = [ imports = [
./cloud.nix ./cloud.nix
./feedreader.nix ./feedreader.nix
./vpn.nix
#./dns.nix #TODO #./dns.nix #TODO
#./feedreader.nix #TODO
#./wallabag.nix #TODO #./wallabag.nix #TODO
#./id.nix #TODO #./id.nix #TODO
#./mx.nix #TODO #./mx.nix #TODO

30
host/montalin/applications/vpn.nix Normal file
View file

@ -0,0 +1,30 @@
{ config, pkgs, lib, ... }:
let
meta = import ../../../meta;
network = meta.network.virtual;
networkName = "mgmt";
networkConfig = network.${networkName};
hostName = config.networking.hostName;
in {
networking.wireguard.enable = true;
networking.wireguard.interfaces = {
"wg-${networkName}" = {
ips = [ "${networkConfig.hosts.${hostName}.v4.ip}/${toString networkConfig.v4.bitmask}" ];
privateKeyFile = "/secrets/wireguard/private/${networkName}";
generatePrivateKeyFile = true;
peers = let
reachablePeerHosts = lib.filterAttrs
(host: netconf: host != hostName && netconf.endpoint != null)
networkConfig.hosts;
in lib.mapAttrsToList (host: netconf: {
presharedKeyFile = netconf.presharedKeyFile or null; # Generate with wg genpsk
publicKey = netconf.publicKey;
endpoint = netconf.endpoint;
allowedIPs = [ netconf.v4.ip ];
persistantKeepalive = netconf.persistentKeepalive;
}) reachablePeerHosts;
};
};
}