Add tryhackme vpn

flake.lock

@@ -42,11 +42,11 @@
     },
     "emacs-overlay": {
       "locked": {
-        "lastModified": 1638466261,
-        "narHash": "sha256-X/+fUmwDQq4NYJW8cPrvluCwhkgOQdbsNJhoY3W8+8c=",
+        "lastModified": 1638497718,
+        "narHash": "sha256-KoVCSZKy1CrWLKHNndkfKYI/Stf5ouun0FPcvVYx26o=",
         "owner": "nix-community",
         "repo": "emacs-overlay",
-        "rev": "931eaf998fd6ebbbd662798b5756f962fb4cda6a",
+        "rev": "225d81933fe74ecd8dacc267a472f92159b832f4",
         "type": "github"
       },
       "original": {
@@ -77,11 +77,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1638415301,
-        "narHash": "sha256-iqszstbHaO5PYeBXQf1ukgYj/aq9wznBbZMrtYMZzgI=",
+        "lastModified": 1638484748,
+        "narHash": "sha256-Xb5X84/PUMXCyZGnixyqjtVyEt5tlCCrSp4lfJdtiHw=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "de54d513c74bf8f4f3a58954b80b5f690639fe72",
+        "rev": "fbb80207f3840785e2918143ebe709f26372f91d",
         "type": "github"
       },
       "original": {

machines/kholinar/default.nix

@@ -1,12 +1,20 @@
-{ pkgs, lib, ... }:
+{ pkgs, lib, config, ... }:
 
 {
   imports = [ ./hardware.nix ];
 
+  config = {
     networking.hostId = "3cc1a4b2";
 
     time.timeZone = "Europe/Brussels";
 
+    services.openvpn.servers.tryhackme = {
+      autoStart = false;
+      config = "config ${config.age.secrets."files/services/openvpn/tryhackme".path}";
+    };
+
+    age.secrets."files/services/openvpn/tryhackme".file = ../../secrets/files/services/openvpn/tryhackme.age;
+
     # Machine-specific module settings
     chvp = {
       stateVersion = "20.09";
@@ -49,4 +57,5 @@
       # It's a pandemic.
       work.enable = true;
     };
+  };
 }

secrets.nix

@@ -55,6 +55,8 @@ in
 
   "secrets/files/programs/ssh/host_configuration.age".publicKeys = hosts ++ users;
 
+  "secrets/files/services/openvpn/tryhackme.age".publicKeys = [ kholinar ] ++ users;
+
   "secrets/files/services/matrix-appservice-slack/config.yml.age".publicKeys = [ lasting-integrity ] ++ users;
   "secrets/files/services/matrix-appservice-slack/registration.yml.age".publicKeys = [ lasting-integrity ] ++ users;
   "secrets/files/services/matrix-synapse/config.yml.age".publicKeys = [ lasting-integrity ] ++ users;