From 58b6018c49dce6ac9a29c7249105096aa380289d Mon Sep 17 00:00:00 2001
From: sinanmohd <sinan@sinanmohd.com>
Date: Tue, 21 Oct 2025 13:55:00 +0530
Subject: chire(os/cez/wireguard): return of the king

---
 os/cez/modules/wireguard.nix | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 os/cez/modules/wireguard.nix

(limited to 'os/cez/modules/wireguard.nix')

diff --git a/os/cez/modules/wireguard.nix b/os/cez/modules/wireguard.nix
new file mode 100644
index 0000000..2bf2252
--- /dev/null
+++ b/os/cez/modules/wireguard.nix
@@ -0,0 +1,20 @@
+{ config, ... }:
+{
+  sops.secrets."misc/wireguard" = { };
+
+  networking.wg-quick.interfaces.bud = {
+    autostart = false;
+    address = [ "10.54.132.2/24" ];
+    mtu = 1420;
+    privateKeyFile = config.sops.secrets."misc/wireguard".path;
+
+    peers = [
+      {
+        publicKey = "O2GRMEWf22YRGKexHAdg1fitucTZ/U/om2MWEJMeyFQ=";
+        allowedIPs = [ "10.54.132.0/24" ];
+        endpoint = "primary.k8s.bud.studio:51820";
+        persistentKeepalive = 25;
+      }
+    ];
+  };
+}
-- 
cgit v1.2.3