fabianhauser/dotfiles
1
0
Fork 0
Code Issues 4 Pull requests 1 Projects Releases Packages Wiki Activity Actions

Fix wireguard configuration

Browse source
This commit is contained in:
Fabian Hauser 2020-12-01 15:11:29 +00:00
parent 3f716bc2c1
commit b498876011
5 changed files with 33 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

28
lib/wireguard.nix
View file

@ -12,18 +12,20 @@
persistentKeepalive = hostconf.persistentKeepalive;
});
makeInterface = (hostName: netname: netconfig: {
ips = [
"${netconfig.hosts.${hostName}.v4.ip}/${toString netconfig.v4.bitmask}"
];
privateKeyFile = "/secrets/wireguard/private/${netname}";
generatePrivateKeyFile = true;
makeInterface = (hostName: netname: netconfig:
let isHub = netconfig.server.hostname == hostName;
in {
ips = [
"${netconfig.hosts.${hostName}.v4.ip}/${toString netconfig.v4.bitmask}"
];
listenPort = if isHub then netconfig.server.port else null;
privateKeyFile = "/secrets/wireguard/private/${netname}";
generatePrivateKeyFile = true;
peers = let
reachablePeerHosts = lib.filterAttrs (host: hostconf:
host != hostName
&& (hostconf.endpoint != null || netconfig.server == hostName))
netconfig.hosts;
in lib.mapAttrsToList (mapHostToPeerConfig netname) reachablePeerHosts;
});
peers = let
reachablePeerHosts = lib.filterAttrs (host: hostconf:
host != hostName && (hostconf.endpoint != null || isHub))
netconfig.hosts;
in lib.mapAttrsToList (mapHostToPeerConfig netname) reachablePeerHosts;
});
}