Jules/nixos-config
1
0
Fork 0
forked from Bun/nixos-config
Code Pull requests Activity

Jimbo VPN.

Browse source
This commit is contained in:
Jimbo 2024-09-06 01:18:21 -04:00
parent c1e3872b70
commit a0ac0f631c
6 changed files with 36 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

28
nixos/server/wireguard.nix Normal file
View file

@ -0,0 +1,28 @@
{outputs, ...}: let
ips = import ../modules/ips.nix;
in {
# enable NAT
networking.nat.enable = true;
networking.nat.externalInterface = "${ips.netInt}";
networking.nat.internalInterfaces = [ "wg0" ];
networking.firewall.allowedUDPPorts = [ 51820 ];
networking.wireguard = {
enable = true;
interfaces = {
# Wireguard interface name can be arbitrary
wg0 = {
# Determines the IP address and subnet of the server's end of the tunnel interface.
ips = [ "10.100.0.1/24" ];
listenPort = 51820;
privateKey = outputs.secrets.wireguardPriv;
peers = [
{ # Jimbo
publicKey = outputs.secrets.wirePhonePub;
allowedIPs = [ "10.100.0.2/32" ];
}
];
};
};
};
}