cnst/cnix
1
0
Fork 0
Code Issues Pull Requests Activity

secrets 3

Browse Source
This commit is contained in:
cnst
2025-07-20 15:49:47 +02:00
parent 3fdb907bb4
commit c672a9d511
2 changed files with 17 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
hosts/sobotka/default.nix
View File

@@ -44,23 +44,22 @@ in {
networking = {
hostName = "sobotka";
domain = "cnst.dev";
# wireguard = {
# interfaces.wg0 = {
# ips = [
# "127.0.0.1/8"
# ];
# peers = [
# {
# allowedIPs = [
# "192.168.88.13/24"
# ];
# # endpoint = "demo.wireguard.io:12913";
# publicKey = "cUeRvwTwrL5GRc4dHjea89RJSa1kh4kIA/sHYzmscyQ=";
# }
# ];
# privateKeyFile = config.age.secrets.wgSobotkaPrivateKey.path;
# };
# };
firewall.allowedUDPPorts = [51820];
wireguard = {
interfaces.wg1 = {
ips = [
"127.0.0.1/8"
];
peers = [
{
name = "kima";
allowedIPs = ["192.168.88.13/24"];
publicKey = "cUeRvwTwrL5GRc4dHjea89RJSa1kh4kIA/sHYzmscyQ=";
}
];
privateKeyFile = config.age.secrets.wgSobotkaPrivateKey.path;
};
};
};
powerManagement.enable = false;

2
hosts/sobotka/server.nix
View File

@@ -31,7 +31,7 @@
deluge.enable = true;
wireguard-netns = {
enable = true;
namespace = "vpn2";
namespace = "vpn";
configFile = config.age.secrets.wgCredentials.path;
privateIP = "10.68.145.193";
dnsIP = "10.64.0.1";