Bun/nixos-config
1
0
Fork 1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Apply variable overhaul to server as well

Browse source
This commit is contained in:
Jimbo 2024-09-23 16:27:23 -04:00
parent 6dab8fc029
commit 7759fd1fa9
2 changed files with 11 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

18
system/server/wireguard.nix
View file

@ -1,12 +1,10 @@
{outputs, ...}: let
ips = import ../modules/ips.nix;
in {
{outputs, ...}: {
# Enable NAT
networking = {
nat = {
enable = true;
externalInterface = "${ips.netInt}";
internalInterfaces = [ "${ips.wgInt}" ];
externalInterface = "${outputs.ips.netInt}";
internalInterfaces = [ "${outputs.ips.wgInt}" ];
};
firewall.allowedUDPPorts = [ 51820 ];
};
@ -14,22 +12,22 @@ in {
networking.wireguard = {
enable = true;
interfaces = {
"${ips.wgInt}" = {
ips = [ "${ips.wgSpan}.1/24" ];
"${outputs.ips.wgInt}" = {
ips = [ "${outputs.ips.wgSpan}.1/24" ];
listenPort = 51820;
privateKey = outputs.secrets.wgServerPriv;
peers = [
{ # Jimbo Pixel 9
publicKey = outputs.secrets.wgPixel9Pub;
allowedIPs = [ "${ips.wgSpan}.2/32" ];
allowedIPs = [ "${outputs.ips.wgSpan}.2/32" ];
}
{ # Oracle VM
publicKey = outputs.secrets.wgOraclePub;
allowedIPs = [ "${ips.wgSpan}.3/32" ];
allowedIPs = [ "${outputs.ips.wgSpan}.3/32" ];
}
{ # General Nix
publicKey = outputs.secrets.wgClientPub;
allowedIPs = [ "${ips.wgSpan}.16/28" ];
allowedIPs = [ "${outputs.ips.wgSpan}.16/28" ];
}
];
};