clerie/nixfiles
1
0
Fork 0
Code Activity

Connect gatekeeper to internal network

Browse Source
This commit is contained in:
clerie
2021-01-10 18:47:11 +01:00
parent c8e98afaae
commit ab70ee9a51
3 changed files with 157 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
hosts/nonat/configuration.nix
View File

@@ -52,6 +52,17 @@
networking.wireguard.enable = true;
networking.wireguard.interfaces = {
wg-gatekeeper = {
ips = [ "fe80::128:2/64" "169.254.128.2/24" ];
peers = [ {
allowedIPs = [ "0.0.0.0/0" "::/0" ];
endpoint = "gatekeeper.net.clerie.de:50128";
publicKey = "7QHjiBbWhpOw4OX3Ye58v0YEOqhdfGJSyaHCdiCa20Q=";
} ];
listenPort = 50128;
allowedIPsAsRoutes = false;
privateKeyFile = "/var/src/secrets/wireguard/wg-gatekeeper";
};
wg-porter = {
ips = [ "fe80::1337:2/64" "169.254.137.2/24" ];
peers = [ {
@@ -65,7 +76,7 @@
};
};
networking.firewall.allowedUDPPorts = [ 51337 ];
networking.firewall.allowedUDPPorts = [ 50128 51337 ];
petabyte.policyrouting = {
enable = true;
@@ -139,6 +150,10 @@
export all;
};
area 0 {
interface "wg-gatekeeper" {
cost 80;
type pointopoint;
};
interface "wg-porter" {
cost 80;
type pointopoint;
@@ -153,6 +168,10 @@
export all;
};
area 0 {
interface "wg-gatekeeper" {
cost 80;
type pointopoint;
};
interface "wg-porter" {
cost 80;
type pointopoint;