stitchy/dotfiles
1
0
Fork 1
Code Issues 2 Pull requests Activity

wireguard for gemini

Browse source
This commit is contained in:
stitchy 2024-01-24 07:02:48 +00:00
parent 58768d0378
commit b5b211e36f
Signed by: stitchy
SSH key fingerprint: SHA256:yz2SoxdnY67tfY5Jzb0f2v8f5W3o/IF359kbcquWip8
2 changed files with 25 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

25
hosts/gemini/default.nix
View file

@ -21,7 +21,30 @@
# Open ports in the firewall.
networking.firewall.allowedTCPPorts = [ 22 ];
# networking.firewall.allowedUDPPorts = [ ... ];
networking.firewall.allowedUDPPorts = [ 51820 ];
networking.wg-quick.interfaces = {
wg0 = {
address = [
"10.100.0.4/32"
];
listenPort = 51820;
# Path to the private key file.
privateKeyFile = "/etc/nixos/hosts/gemini/wg.key";
peers = [{
publicKey = "atXy3zi3FLoxP8hgzJIIeLGks4Te9HrKkQGoaobholM=";
presharedKey = "Z3pRS99HKCOuQV7az2GqlR3X4XbX3PlfQrC5AoT3XkA=";
allowedIPs = [ "10.100.0.0/24" ];
endpoint = "moms_wg.wg.stitchy.moe:47111";
persistentKeepalive = 25;
}];
};
};
system.stateVersion = "23.05"; # Did you read the comment?
}