clerie/nixfiles
1
0
Fork 0
Code

Pin tunnel ips on gatekeeper

Browse Source
This commit is contained in:
clerie 2021-02-03 19:47:12 +01:00
parent 882385b6dd
commit b214a237fd
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
hosts/gatekeeper/configuration.nix
View File

@ -40,7 +40,7 @@
networking.wireguard.enable = true; networking.wireguard.enable = true;
networking.wireguard.interfaces = { networking.wireguard.interfaces = {
wg-carbon = { wg-carbon4 = {
ips = [ "fe80::127:1/64" "169.254.127.1/24" ]; ips = [ "fe80::127:1/64" "169.254.127.1/24" ];
peers = [ { peers = [ {
allowedIPs = [ "0.0.0.0/0" "::/0" ]; allowedIPs = [ "0.0.0.0/0" "::/0" ];
@ -48,18 +48,18 @@
} ]; } ];
listenPort = 50127; listenPort = 50127;
allowedIPsAsRoutes = false; allowedIPsAsRoutes = false;
privateKeyFile = "/var/src/secrets/wireguard/wg-carbon"; privateKeyFile = "/var/src/secrets/wireguard/wg-carbon4";
}; };
wg-nonat = { wg-nonat6 = {
ips = [ "fe80::128:1/64" "169.254.128.1/24" ]; ips = [ "fe80::128:1/64" "169.254.128.1/24" ];
peers = [ { peers = [ {
allowedIPs = [ "0.0.0.0/0" "::/0" ]; allowedIPs = [ "0.0.0.0/0" "::/0" ];
endpoint = "nonat.net.clerie.de:50128"; endpoint = "[2001:638:904:ffca::6]:50128";
publicKey = "0GGDyPj/0uMaba9pmOyj+Sx+3jMivpRdpTJhadl6bS8="; publicKey = "0GGDyPj/0uMaba9pmOyj+Sx+3jMivpRdpTJhadl6bS8=";
} ]; } ];
listenPort = 50128; listenPort = 50128;
allowedIPsAsRoutes = false; allowedIPsAsRoutes = false;
privateKeyFile = "/var/src/secrets/wireguard/wg-nonat"; privateKeyFile = "/var/src/secrets/wireguard/wg-nonat6";
}; };
wg-vpn = { wg-vpn = {
ips = [ "2a01:4f8:c0c:15f1::8001/113" "10.20.30.1/24" ]; ips = [ "2a01:4f8:c0c:15f1::8001/113" "10.20.30.1/24" ];
@ -186,11 +186,11 @@
export all; export all;
}; };
area 0 { area 0 {
interface "wg-carbon" { interface "wg-carbon4" {
cost 80; cost 80;
type pointopoint; type pointopoint;
}; };
interface "wg-nonat" { interface "wg-nonat6" {
cost 80; cost 80;
type pointopoint; type pointopoint;
}; };
@ -204,11 +204,11 @@
export all; export all;
}; };
area 0 { area 0 {
interface "wg-carbon" { interface "wg-carbon4" {
cost 80; cost 80;
type pointopoint; type pointopoint;
}; };
interface "wg-nonat" { interface "wg-nonat6" {
cost 80; cost 80;
type pointopoint; type pointopoint;
}; };