Switch to wg-quick for clients, seems more reliable
This commit is contained in:
parent
160dd14d55
commit
06e1964f7d
2 changed files with 3 additions and 8 deletions
|
@ -10,7 +10,7 @@
|
||||||
];
|
];
|
||||||
|
|
||||||
networking.hostName = "envy";
|
networking.hostName = "envy";
|
||||||
networking.wireguard.interfaces.wgc.ips = [ "10.100.0.25/24" ];
|
networking.wg-quick.interfaces.wgc.address = [ "10.100.0.25/24" ];
|
||||||
|
|
||||||
system = {
|
system = {
|
||||||
lanzaboote.enable = true;
|
lanzaboote.enable = true;
|
||||||
|
|
|
@ -7,13 +7,8 @@
|
||||||
|
|
||||||
config = lib.mkIf config.system.wireguard.client.enable {
|
config = lib.mkIf config.system.wireguard.client.enable {
|
||||||
networking = {
|
networking = {
|
||||||
firewall = {
|
firewall.trustedInterfaces = [ "wgc" ];
|
||||||
allowedUDPPorts = [ 51820 ];
|
wg-quick.interfaces.wgc = {
|
||||||
trustedInterfaces = [ "wgc" ];
|
|
||||||
};
|
|
||||||
|
|
||||||
wireguard.interfaces.wgc = {
|
|
||||||
listenPort = 51820;
|
|
||||||
privateKey = config.secrets.wgClientPriv;
|
privateKey = config.secrets.wgClientPriv;
|
||||||
peers = [
|
peers = [
|
||||||
{ # Cyberspark Server
|
{ # Cyberspark Server
|
||||||
|
|
Loading…
Add table
Reference in a new issue