mirror of
https://github.com/foo-dogsquared/nixos-config.git
synced 2025-02-07 12:19:07 +00:00
hosts/ni: update Wireguard "client" config again
This commit is contained in:
parent
3ccdbf3b31
commit
9857cabb07
@ -241,7 +241,7 @@ in
|
||||
{
|
||||
privateKeyFile = config.sops.secrets."ni/wireguard/private-key".path;
|
||||
listenPort = wireguardPort;
|
||||
dns = with interfaces.internal; [ IPv4.adress IPv6.address ];
|
||||
dns = with wireguardPeers.server; [ IPv4 IPv6 ];
|
||||
postUp =
|
||||
let
|
||||
resolvectl = "${lib.getBin pkgs.systemd}/bin/resolvectl";
|
||||
@ -262,6 +262,7 @@ in
|
||||
presharedKeyFile = config.sops.secrets."ni/wireguard/preshared-keys/plover".path;
|
||||
allowedIPs = wireguardAllowedIPs;
|
||||
endpoint = "${interfaces.main'.IPv4.address}:${toString wireguardPort}";
|
||||
persistentKeepalive = 25;
|
||||
}
|
||||
|
||||
# The "phone" peer.
|
||||
|
Loading…
Reference in New Issue
Block a user