clerie/nixfiles
1
0
Fork 0
Code Activity

hosts/dn42-il-gw1: Add prefixlabs peering

Browse Source
This commit is contained in:
clerie
2025-12-03 19:10:38 +01:00
parent 90636b14b5
commit b768bf6deb
2 changed files with 59 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

54
hosts/dn42-il-gw1/configuration.nix
View File

@@ -62,6 +62,44 @@
];
privateKeyFile = config.sops.secrets.wg0565.path;
};
# prefixlabs
# https://prefixlabs.net/
wg1240 = {
ips = [
"fe80::2574/128"
];
postSetup = ''
ip addr replace dev wg1718 fe80::2574/128 peer fe80::1240:11/128
'';
listenPort = 51240;
allowedIPsAsRoutes = false;
peers = [
{
allowedIPs = [ "fe80::/10" "fd00::/8" ];
endpoint = "de-01.prefixlabs.net:22574";
publicKey = "ixeEBfac1BXpjNKbxcgL6Beg9HTgtmq6CjHIfMwNSDw=";
}
];
privateKeyFile = config.sops.secrets.wg1240.path;
};
wg1241 = {
ips = [
"fe80::2574/128"
];
postSetup = ''
ip addr replace dev wg1718 fe80::2574/128 peer fe80::1240:1/128
'';
listenPort = 51241;
allowedIPsAsRoutes = false;
peers = [
{
allowedIPs = [ "fe80::/10" "fd00::/8" ];
endpoint = "uk-01.prefixlabs.net:22574";
publicKey = "Yu1Y4qdSaf+OWPbAoh7PvuM2eWCVbNg84+EX5Q2Zjl4=";
}
];
privateKeyFile = config.sops.secrets.wg1241.path;
};
# fooker
wg1271 = {
ips = [
@@ -164,6 +202,8 @@
networking.firewall.allowedUDPPorts = [
50565 # wg0565
51240 # wg1240
51241 # wg1241
51271 # wg1271
51272 # wg1272
51280 # wg1280
@@ -199,6 +239,20 @@
remoteAsn = "4242420565";
localAddress = "fe80::2574";
}
{
peerName = "peer_1240_de_01";
remoteAddress = "fe80::1240:11";
interfaceName = "wg1240";
remoteAsn = "4242421240";
localAddress = "fe80::2574";
}
{
peerName = "peer_1240_uk_01";
remoteAddress = "fe80::1240:1";
interfaceName = "wg1241";
remoteAsn = "4242421240";
localAddress = "fe80::2574";
}
{
peerName = "peer_1271_north";
remoteAddress = "fe80::2";