Gonna revert and modify the original flake, add back overlays from a shared file, and figure things out after

2024-10-12 19:41:05 -04:00 · 2024-10-12 19:41:05 -04:00 · 4ad26636a7
commit 4ad26636a7
parent 65f90a0bf3
17 changed files with 116 additions and 14 deletions
--- a/modules/system/devices/networking/wireguard/server/default.nix
+++ b/modules/system/devices/networking/wireguard/server/default.nix
@ -0,0 +1,36 @@
+{ outputs, ... }:
+{
+  networking = {
+    nat = {
+      enable = true;
+      externalInterface = "${outputs.ips.netInt}";
+      internalInterfaces = [ "${outputs.ips.wgInt}" ];
+    };
+    firewall.allowedUDPPorts = [ 51820 ];
+  };
+
+  networking.wireguard = {
+    enable = true;
+    interfaces = {
+      "${outputs.ips.wgInt}" = {
+        ips = [ "${outputs.ips.wgSpan}.1/24" ];
+        listenPort = 51820;
+        privateKey = outputs.secrets.wgServerPriv;
+        peers = [
+          { # Jimbo Pixel 9
+            publicKey = outputs.secrets.wgPixel9Pub;
+            allowedIPs = [ "${outputs.ips.wgSpan}.2/32" ];
+          }
+          { # Oracle VM
+            publicKey = outputs.secrets.wgOraclePub;
+            allowedIPs = [ "${outputs.ips.wgSpan}.3/32" ];
+          }
+          { # General Nix
+            publicKey = outputs.secrets.wgClientPub;
+            allowedIPs = [ "${outputs.ips.wgSpan}.16/28" ];
+          }
+        ];
+      };
+    };
+  };
+}