clerie/nixfiles
1
0
Fork 0
Code Activity

Update from updated-inputs-2025-12-06-02-03

Browse Source
This commit is contained in:
Flake Update Bot
2025-12-06 03:03:05 +01:00
parent 2a7a4799a3 da282e48f7
commit 6a1fd669a0
1 changed files with 102 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

119
hosts/dn42-il-gw1/configuration.nix
View File

@@ -183,25 +183,25 @@
];
privateKeyFile = config.sops.secrets.wg1280.path;
};
# lutoma
wg4719 = {
# c4tg1rl5
# https://catgirls.systems/peering/
wg1411 = {
ips = [
#"fe80::1/128"
# peer fe80::acab/128
"fe80::2574/128"
];
postSetup = ''
ip addr add dev wg4719 fe80::1/128 peer fe80::acab/128
ip addr replace dev wg1411 fe80::2574/128 peer fe80::1411/128
'';
listenPort = 54719;
listenPort = 51411;
allowedIPsAsRoutes = false;
peers = [
{
allowedIPs = [ "fe80::/10" "fd00::/8" ];
endpoint = "[2603:c020:8001:ed42::42]:42546";
publicKey = "MkVyCgIq0BOStFIu2/Wl91ofFuRvnG3ZqTWFfVs/VlQ=";
}
#{
# allowedIPs = [ "fe80::/10" "fd00::/8" ];
# endpoint = "";
# publicKey = "";
#}
];
privateKeyFile = config.sops.secrets.wg4719.path;
privateKeyFile = config.sops.secrets.dn42-router-general-wireguard-key.path;
};
# zaphyra
wg1718 = {
@@ -223,17 +223,81 @@
];
privateKeyFile = config.sops.secrets.wg1718.path;
};
# iedon
# https://iedon.net/
wg2189 = {
ips = [
"fe80::2574/128"
];
postSetup = ''
ip addr replace dev wg2189 fe80::2574/128 peer fe80::2189:e9/128
'';
listenPort = 52189;
allowedIPsAsRoutes = false;
peers = [
{
allowedIPs = [ "fe80::/10" "fd00::/8" ];
endpoint = "de-fra.dn42.iedon.net:42463";
publicKey = "FHp0OR4UpAS8/Ra0FUNffTk18soUYCa6NcvZdOgxY0k=";
}
];
privateKeyFile = config.sops.secrets.dn42-router-general-wireguard-key.path;
};
# lutoma
wg4719 = {
ips = [
#"fe80::1/128"
# peer fe80::acab/128
];
postSetup = ''
ip addr add dev wg4719 fe80::1/128 peer fe80::acab/128
'';
listenPort = 54719;
allowedIPsAsRoutes = false;
peers = [
{
allowedIPs = [ "fe80::/10" "fd00::/8" ];
endpoint = "[2603:c020:8001:ed42::42]:42546";
publicKey = "MkVyCgIq0BOStFIu2/Wl91ofFuRvnG3ZqTWFfVs/VlQ=";
}
];
privateKeyFile = config.sops.secrets.wg4719.path;
};
# tbspace
wg6190 = {
ips = [
"fe80::2574/128"
];
postSetup = ''
ip addr replace dev wg6190 fe80::2574/128 peer fe80::1299:e/128
'';
listenPort = 56190;
allowedIPsAsRoutes = false;
peers = [
{
allowedIPs = [ "fe80::/10" "fd00::/8" ];
endpoint = "dn42.tbspace.de:49168";
publicKey = "skvyDl81J8Zu3Ziem+7JKeU4UYLhhWt7gWelg8nEbzQ=";
}
];
privateKeyFile = config.sops.secrets.dn42-router-general-wireguard-key.path;
};
};
networking.firewall.allowedUDPPorts = [
50150 # wg0150
50565 # wg0565
50663 # wg0663
51240 # wg1240
51241 # wg1241
51271 # wg1271
51272 # wg1272
51280 # wg1280
54719 # wg4719
51411 # wg1411
51718 # wg1718
52189 # wg2189
54719 # wg4719
56190 # wg6190
];
profiles.clerie.dn42-router = {
@@ -306,6 +370,27 @@
remoteAsn = "4242421280";
localAddress = "fde3:4c0d:2836:ff00::21";
}
{
peerName = "peer_1411_de_fsn";
remoteAddress = "fe80::1411";
interfaceName = "wg1411";
remoteAsn = "4242421411";
localAddress = "fe80::2574";
}
{
peerName = "peer_1718";
remoteAddress = "fe80::6b61";
interfaceName = "wg1718";
remoteAsn = "4242421718";
localAddress = "fe80::2574";
}
{
peerName = "peer_2189_de_fra";
remoteAddress = "fe80::2189:e9";
interfaceName = "wg2189";
remoteAsn = "4242422189";
localAddress = "fe80::2574";
}
{
peerName = "peer_4719";
remoteAddress = "fe80::acab";
@@ -314,10 +399,10 @@
localAddress = "fe80::1";
}
{
peerName = "peer_1718";
remoteAddress = "fe80::6b61";
interfaceName = "wg1718";
remoteAsn = "4242421718";
peerName = "peer_6190";
remoteAddress = "fe80::1299:e";
interfaceName = "wg6190";
remoteAsn = "76190";
localAddress = "fe80::2574";
}
];