25 lines
701 B
Nix
25 lines
701 B
Nix
{ config, ... }:
|
|
|
|
let
|
|
data = config.chvp.base.network.wireguard.data;
|
|
subnet = config.chvp.base.network.wireguard.subnet;
|
|
pskFile = config.chvp.base.network.wireguard.pskFile;
|
|
in
|
|
{
|
|
networking.wg-quick.interfaces."wg0" = {
|
|
address = [ "${data.${config.networking.hostName}.ip}/32" ];
|
|
autostart = true;
|
|
dns = [ data.lasting-integrity.ip ];
|
|
mtu = 1342;
|
|
peers = [
|
|
{
|
|
allowedIPs = [ subnet ];
|
|
endpoint = "lasting-integrity.vanpetegem.me:51820";
|
|
presharedKeyFile = pskFile;
|
|
persistentKeepalive = 25;
|
|
publicKey = data.lasting-integrity.pubkey;
|
|
}
|
|
];
|
|
privateKeyFile = data.${config.networking.hostName}.privkeyFile;
|
|
};
|
|
}
|