summaryrefslogtreecommitdiff
path: root/hosts/cez/modules/wireguard.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/cez/modules/wireguard.nix')
-rw-r--r--hosts/cez/modules/wireguard.nix22
1 files changed, 22 insertions, 0 deletions
diff --git a/hosts/cez/modules/wireguard.nix b/hosts/cez/modules/wireguard.nix
new file mode 100644
index 0000000..07ea90c
--- /dev/null
+++ b/hosts/cez/modules/wireguard.nix
@@ -0,0 +1,22 @@
+{ config, ... }:
+
+let
+ domain = config.userdata.domain;
+in
+{
+ sops.secrets."misc/wireguard" = {};
+
+ networking.wg-quick.interfaces."wg" = {
+ address = [ "10.0.1.2/24" ];
+ dns = [ "10.0.1.1" ];
+ mtu = 1380;
+ privateKeyFile = config.sops.secrets."misc/wireguard".path;
+
+ peers = [{
+ publicKey = "wJMyQDXmZO4MjYRk6NK4+J6ZKWLTTZygAH+OwbPjOiw=";
+ allowedIPs = [ "0.0.0.0/0" ];
+ endpoint = "${domain}:51820";
+ persistentKeepalive = 25;
+ }];
+ };
+}