blob: 47b857ada9d6c2e748f5acf5b01e654fea163786 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
|
{ config, pkgs, ... }:
let
domain = config.global.userdata.domain;
wgIface = "kay";
helper = pkgs.writeShellApplication {
name = "vpn";
text = ''
note() {
command -v notify-send > /dev/null &&
notify-send " VPN" "$1"
printf "\n%s\n" "$1"
}
if systemctl status "wg-quick-${wgIface}.service" > /dev/null 2>&1; then
sudo -A systemctl stop "wg-quick-${wgIface}.service" &&
note "connection was dropped"
else
sudo -A systemctl start "wg-quick-${wgIface}.service" &&
note "traffic routed through ${wgIface}"
fi
'';
};
in
{
sops.secrets."misc/wireguard" = { };
networking.wg-quick.interfaces.${wgIface} = {
autostart = false;
address = [ "10.0.1.2/24" ];
dns = [ "10.0.1.1" ];
mtu = 1412;
privateKeyFile = config.sops.secrets."misc/wireguard".path;
peers = [
{
publicKey = "wJMyQDXmZO4MjYRk6NK4+J6ZKWLTTZygAH+OwbPjOiw=";
allowedIPs = [
"10.0.1.0/24"
"104.16.0.0/12"
"172.64.0.0/13"
];
endpoint = "${domain}:51820";
persistentKeepalive = 25;
}
];
};
environment.systemPackages = [ helper ];
}
|
