diff --git a/hosts/dn42-il-gw1/configuration.nix b/hosts/dn42-il-gw1/configuration.nix index e061dbc..ac02dad 100644 --- a/hosts/dn42-il-gw1/configuration.nix +++ b/hosts/dn42-il-gw1/configuration.nix @@ -183,6 +183,26 @@ ]; privateKeyFile = config.sops.secrets.wg1280.path; }; + # iedon + # https://iedon.net/ + wg2189 = { + ips = [ + "fe80::2574/128" + ]; + postSetup = '' + ip addr replace dev wg2189 fe80::2574/128 peer fe80::2189:e9/128 + ''; + listenPort = 52189; + allowedIPsAsRoutes = false; + peers = [ + { + allowedIPs = [ "fe80::/10" "fd00::/8" ]; + endpoint = "de-fra.dn42.iedon.net:42463"; + publicKey = "FHp0OR4UpAS8/Ra0FUNffTk18soUYCa6NcvZdOgxY0k="; + } + ]; + privateKeyFile = config.sops.secrets.dn42-router-general-wireguard-key.path; + }; # lutoma wg4719 = { ips = [ @@ -325,6 +345,13 @@ remoteAsn = "4242421280"; localAddress = "fde3:4c0d:2836:ff00::21"; } + { + peerName = "peer_2189_de_fra"; + remoteAddress = "fe80::2189:e9"; + interfaceName = "wg2189"; + remoteAsn = "4242422189"; + localAddress = "fe80::2574"; + } { peerName = "peer_4719"; remoteAddress = "fe80::acab";