From bf8a48eae55bec89f06508136d65ee98ceace558 Mon Sep 17 00:00:00 2001
From: sinanmohd <sinan@sinanmohd.com>
Date: Sun, 17 Sep 2023 13:59:03 +0530
Subject: networking/wireguard: init

---
 hosts/cez/modules/wireguard.nix | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 hosts/cez/modules/wireguard.nix

(limited to 'hosts/cez/modules')

diff --git a/hosts/cez/modules/wireguard.nix b/hosts/cez/modules/wireguard.nix
new file mode 100644
index 0000000..07ea90c
--- /dev/null
+++ b/hosts/cez/modules/wireguard.nix
@@ -0,0 +1,22 @@
+{ config, ... }:
+
+let
+  domain = config.userdata.domain;
+in
+{
+  sops.secrets."misc/wireguard" = {};
+
+  networking.wg-quick.interfaces."wg" = {
+    address = [ "10.0.1.2/24" ];
+    dns = [ "10.0.1.1" ];
+    mtu = 1380;
+    privateKeyFile = config.sops.secrets."misc/wireguard".path;
+
+    peers = [{
+      publicKey = "wJMyQDXmZO4MjYRk6NK4+J6ZKWLTTZygAH+OwbPjOiw=";
+      allowedIPs = [ "0.0.0.0/0" ];
+      endpoint = "${domain}:51820";
+      persistentKeepalive = 25;
+    }];
+  };
+}
-- 
cgit v1.2.3