Attempting to migrate off digga...

2022-12-06 17:09:27 +10:00
parent 0051488eb1
commit f5a0ad9ba9
203 changed files with 575 additions and 7302 deletions
@@ -0,0 +1,41 @@
+{ config, pkgs, lib, ... }:
+{
+  environment.systemPackages = [ pkgs.wireguard-tools pkgs.mosh ];
+  networking.nat = {
+    enable = true;
+    externalInterface = "ens3";
+    internalInterfaces = [ "wg0" ];
+  };
+  networking.firewall = {
+    allowedUDPPorts = [ 60990 ];
+  };
+
+  networking.wireguard.interfaces.wg0 = {
+    ips = [ "10.0.69.1/24" ];
+    listenPort = 60990;
+    privateKeyFile = "/var/lib/wireguard/priv";
+    generatePrivateKeyFile = true; # TODO agenix secret
+    peers = [
+      {
+        # box
+        publicKey = "Ra78mOc110K7URN5uB3m9d78iBKgeRHzT+3HkiFp9BU=";
+        allowedIPs = [ "10.0.69.4/32" ];
+      }
+      {
+        # line
+        publicKey = "fsb1FuGmYi89p4CVXytKw2FYamONKtoanxrgs/dJjC8=";
+        allowedIPs = [ "10.0.69.3/32" ];
+      }
+      {
+        # curve
+        publicKey = "kzw+51vVYkitGmSMJPAj1jdhzmxhvmSrrIQ4Ar8wzlI=";
+        allowedIPs = [ "10.0.69.2/32" ];
+      }
+      {
+        # helix
+        publicKey = "gcdq86hhEUlqF2chqYB/F8pALyAMNFvwLycxBoHuoDs=";
+        allowedIPs = [ "10.0.69.5/32" ];
+      }
+    ];
+  };
+}