foodogsquared/nixos-config
1
0
Fork 0
mirror of https://github.com/foo-dogsquared/nixos-config.git synced 2025-01-31 10:58:02 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

hosts/ni: update Wireguard "client" configuration

Browse Source
This commit is contained in:
Gabriel Arazas 2023-06-08 12:17:48 +08:00
parent bf92556c53
commit 039f033632
No known key found for this signature in database
GPG Key ID: ADE0C41DAB221FCC
1 changed files with 14 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
hosts/ni/default.nix
View File

@ -225,25 +225,30 @@ in
system.stateVersion = "23.05"; # Yes! I read the comment! system.stateVersion = "23.05"; # Yes! I read the comment!
# Setting up split DNS whenever possible.
services.resolved.domains = [
"~plover.foodogsquared.one"
"~0.27.172.in-addr.arpa"
];
# Setting up Wireguard as a VPN tunnel. Since this is a laptop that meant to # Setting up Wireguard as a VPN tunnel. Since this is a laptop that meant to
# be used anywhere, we're configuring Wireguard here as a "client". # be used anywhere, we're configuring Wireguard here as a "client".
# #
# We're using wg-quick here as this host is using network managers that can # We're using wg-quick here as this host is using network managers that can
# differ between workflows (i.e., GNOME and KDE Plasma using NetworkManager, # differ between workflows (i.e., GNOME and KDE Plasma using NetworkManager,
# others might be using systemd-networkd). # others might be using systemd-networkd).
networking.wg-quick.interfaces.wireguard0 = { networking.wg-quick.interfaces.wireguard0 = let
domains = [
"~plover.foodogsquared.one"
"~0.27.172.in-addr.arpa"
];
in {
privateKeyFile = config.sops.secrets."ni/wireguard/private-key".path; privateKeyFile = config.sops.secrets."ni/wireguard/private-key".path;
listenPort = wireguardPort; listenPort = wireguardPort;
dns = with interfaces.internal; [ IPv4.adress IPv6.address ];
postUp = let
resolvectl = "${lib.getBin pkgs.systemd}/bin/resolvectl";
in ''
${resolvectl} domain %i ${lib.concatStringsSep " " domains}
'';
address = with wireguardPeers.desktop; [ address = with wireguardPeers.desktop; [
"${IPv4}/24" "${IPv4}/32"
"${IPv6}/64" "${IPv6}/128"
]; ];
peers = [ peers = [