56 lines
1.6 KiB
Nix
56 lines
1.6 KiB
Nix
{ config, lib, ... }:
|
|
|
|
let
|
|
data = {
|
|
fairphone = {
|
|
pubkey = "mHAq+2AP1EZdlSZIxA8UCret8EStrR3nEIU2x6NVETE=";
|
|
ip = "10.240.0.4";
|
|
};
|
|
kholinar = {
|
|
pubkey = "oRA22ymFeNQBeRx6Jyd6Gd8EOUpAv9QSFkGs+Br7yEk=";
|
|
privkeyFile = config.age.secrets."files/wireguard/kholinar.privkey".path;
|
|
ip = "10.240.0.3";
|
|
};
|
|
lasting-integrity = {
|
|
pubkey = "mid3XfCY2jaNK0J6C9ltFLAbxL0IApwMw9K1Z+PU8C0=";
|
|
privkeyFile = config.age.secrets."files/wireguard/lasting-integrity.privkey".path;
|
|
ip = "10.240.0.1";
|
|
};
|
|
thaylen-city = {
|
|
pubkey = "O0q2/W7dRM4LvAL9MSDZqAbGSzqi8AHLVl1sJsRDsUY=";
|
|
privkeyFile = config.age.secrets."files/wireguard/thaylen-city.privkey".path;
|
|
ip = "10.240.0.5";
|
|
};
|
|
urithiru = {
|
|
pubkey = "f4bnm/qNhMW5iXdQcBMmP8IUN6n+pDS15Ikct7QPr0E=";
|
|
privkeyFile = config.age.secrets."files/wireguard/urithiru.privkey".path;
|
|
ip = "10.240.0.2";
|
|
};
|
|
};
|
|
subnet = "10.240.0.0/24";
|
|
pskFile = config.age.secrets."files/wireguard/psk".path;
|
|
in
|
|
{
|
|
options.chvp.base.network.wireguard = {
|
|
server = lib.mkOption {
|
|
default = false;
|
|
example = true;
|
|
};
|
|
data = lib.mkOption {
|
|
default = data;
|
|
readOnly = true;
|
|
};
|
|
subnet = lib.mkOption {
|
|
default = subnet;
|
|
readOnly = true;
|
|
};
|
|
pskFile = lib.mkOption {
|
|
default = pskFile;
|
|
readOnly = true;
|
|
};
|
|
};
|
|
config = {
|
|
age.secrets."files/wireguard/psk".file = ../../../../secrets/files/wireguard/psk.age;
|
|
age.secrets."files/wireguard/${config.networking.hostName}.privkey".file = ../../../../secrets/files/wireguard + "/${config.networking.hostName}.privkey.age";
|
|
};
|
|
}
|