clerie
/
nixfiles
1
0
Fork 0
Code

Pin tunnel ips on gatekeeper

This commit is contained in:
clerie 2021-02-03 19:47:12 +01:00
parent 882385b6dd
commit b214a237fd
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
hosts/gatekeeper/configuration.nix
View File

@ -40,7 +40,7 @@
networking.wireguard.enable = true;
networking.wireguard.interfaces = {
wg-carbon = {
wg-carbon4 = {
ips = [ "fe80::127:1/64" "169.254.127.1/24" ];
peers = [ {
allowedIPs = [ "0.0.0.0/0" "::/0" ];
@ -48,18 +48,18 @@
} ];
listenPort = 50127;
allowedIPsAsRoutes = false;
privateKeyFile = "/var/src/secrets/wireguard/wg-carbon";
privateKeyFile = "/var/src/secrets/wireguard/wg-carbon4";
};
wg-nonat = {
wg-nonat6 = {
ips = [ "fe80::128:1/64" "169.254.128.1/24" ];
peers = [ {
allowedIPs = [ "0.0.0.0/0" "::/0" ];
endpoint = "nonat.net.clerie.de:50128";
endpoint = "[2001:638:904:ffca::6]:50128";
publicKey = "0GGDyPj/0uMaba9pmOyj+Sx+3jMivpRdpTJhadl6bS8=";
} ];
listenPort = 50128;
allowedIPsAsRoutes = false;
privateKeyFile = "/var/src/secrets/wireguard/wg-nonat";
privateKeyFile = "/var/src/secrets/wireguard/wg-nonat6";
};
wg-vpn = {
ips = [ "2a01:4f8:c0c:15f1::8001/113" "10.20.30.1/24" ];
@ -186,11 +186,11 @@
export all;
};
area 0 {
interface "wg-carbon" {
interface "wg-carbon4" {
cost 80;
type pointopoint;
};
interface "wg-nonat" {
interface "wg-nonat6" {
cost 80;
type pointopoint;
};
@ -204,11 +204,11 @@
export all;
};
area 0 {
interface "wg-carbon" {
interface "wg-carbon4" {
cost 80;
type pointopoint;
};
interface "wg-nonat" {
interface "wg-nonat6" {
cost 80;
type pointopoint;
};