lilith/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

wireguard.nix

Browse source
This commit is contained in:
Lilith 2026-01-15 13:00:45 +01:00
parent 2f7dc23398
commit e153dabbc9
No known key found for this signature in database
GPG key ID: 272C807BD91F8446
1 changed files with 27 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

28
server/wireguard.nix
View file

@ -1 +1,27 @@
{ ... }: { }
{ config, lib, ... }:
{
options.server.wireguard-bridge.enable = lib.mkEnableOption "Enables Wireguard host functionality";
options.server.wireguard-bridge.ip = lib.mkOption;
config = lib.mkIf config.server.wireguard-bridge {
sops.secrets."wireguard/bridge/private" = { };
networking.firewall.allowedUDPPorts = [ 51821 ];
networking.wireguard.interfaces = {
bridge = {
ips = [ config.server.wireguard-bridge.ip ];
listenPort = 51821;
privateKeyFile = config.sops.secrets."wireguard-bridge/private".path;
peers = [
{
publicKey = "kYJn39tFStvzJ6QOMy3NabNWrJREaYdxwo/GdYD0MRk=";
allowedIPs = [ "10.0.1.2/32" ];
endpoint = "95.217.79.106:51821";
persistentKeepalive = 25;
}
];
};
};
};
}