fabianhauser/dotfiles
1
0
Fork 0
Code Issues 4 Pull requests 1 Projects Releases Packages Wiki Activity Actions

Fix wireguard configuration

Browse source
This commit is contained in:
Fabian Hauser 2020-12-01 15:11:29 +00:00
parent 3f716bc2c1
commit b498876011
5 changed files with 33 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

1
host/montalin/applications/default.nix
View file

@ -3,7 +3,6 @@
imports = [
./cloud.nix
./feedreader.nix
./vpn.nix
#./dns.nix #TODO
#./wallabag.nix #TODO
#./id.nix #TODO

13
host/montalin/applications/vpn.nix
View file

@ -1,13 +0,0 @@
{ config, pkgs, lib, ... }:
let
meta = import ../../../meta;
network = meta.network.virtual;
networkName = "mgmt";
in {
networking.wireguard.enable = true;
networking.wireguard.interfaces = {
"wg-${networkName}" =
pkgs.lib.qois.wireguard.makeInterface config.networking.hostName
networkName network.${networkName};
};
}

12
host/montalin/networking.nix
View file

@ -24,6 +24,8 @@ in {
# networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
networking.firewall.allowedTCPPorts = [ 80 443 ];
networking.firewall.allowedUDPPorts =
[ meta.network.virtual.mgmt.server.port ];
services.qois.luks-ssh = {
enable = true;
@ -33,4 +35,14 @@ in {
gateway = plessur-net.dmz.v4.gateway;
sshPort = 2222;
};
networking.wireguard.enable = true;
networking.wireguard.interfaces = let
network = meta.network.virtual;
networkName = "mgmt";
in {
"wg-${networkName}" =
pkgs.lib.qois.wireguard.makeInterface config.networking.hostName
networkName network.${networkName};
};
}