clerie/nixfiles
1
0
Fork 0
Code Activity

Connect gatekeeper to internal network

Browse Source
This commit is contained in:
clerie
2021-01-10 18:47:11 +01:00
parent c8e98afaae
commit ab70ee9a51
3 changed files with 157 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
hosts/carbon/configuration.nix
View File

@@ -46,6 +46,17 @@
networking.wireguard.enable = true;
networking.wireguard.interfaces = {
wg-gatekeeper = {
ips = [ "fe80::127:2/64" "169.254.127.2/24" ];
peers = [ {
allowedIPs = [ "0.0.0.0/0" "::/0" ];
endpoint = "gatekeeper.net.clerie.de:50127";
publicKey = "y+Bk5eIHgmnq9xuBDD+fk/OIkKRZU6AE4ISx4RdDDyg=";
persistentKeepalive = 25;
} ];
allowedIPsAsRoutes = false;
privateKeyFile = "/var/src/secrets/wireguard/wg-gatekeeper";
};
wg-porter = {
ips = [ "fe80::138:2/64" "169.254.138.2/24" ];
peers = [ {
@@ -131,6 +142,10 @@
export all;
};
area 0 {
interface "wg-gatekeeper" {
cost 80;
type pointopoint;
};
interface "wg-porter" {
cost 80;
type pointopoint;
@@ -145,6 +160,10 @@
export all;
};
area 0 {
interface "wg-gatekeeper" {
cost 80;
type pointopoint;
};
interface "wg-porter" {
cost 80;
type pointopoint;