1
0

Add wireguard to carbon

This commit is contained in:
clerie 2020-12-07 15:24:04 +01:00
parent 7cb3f0ae3b
commit 4a9ef35167

View File

@ -24,5 +24,27 @@
networking.useDHCP = false; networking.useDHCP = false;
networking.interfaces.enp1s0.useDHCP = true; networking.interfaces.enp1s0.useDHCP = true;
networking.wireguard.enable = true;
networking.wireguard.interfaces = {
wg-gatekeeper = {
ips = [
"10.20.30.104/24"
"2a01:4f8:c0c:15f1:8104/64"
];
peers = [
{
allowedIPs = [
"0.0.0.0/0"
"::/0"
];
allowedIPsAsRoute = false;
endpoint = "gatekeeper.net.clerie.de:51820";
publicKey = "2p1Jqs3bkXbXHFWE6vp1yxHIFoUaZQEARS2nJzbkuBA=";
}
];
privateKeyFile = "/var/src/secrets/wireguard/wg-gatekeeper";
};
};
system.stateVersion = "21.03"; system.stateVersion = "21.03";
} }