diff --git a/hosts/dn42-il-gw1/configuration.nix b/hosts/dn42-il-gw1/configuration.nix index 4332f4c..4d4c956 100644 --- a/hosts/dn42-il-gw1/configuration.nix +++ b/hosts/dn42-il-gw1/configuration.nix @@ -46,6 +46,25 @@ # dn42-router-general-wireguard-key public key: # r38qvXqu26x4f6yUGxg44Ji4db/g2HK7RZwG7Boh+38= + # darkpoint + wg0150 = { + ips = [ + "fe80::2574/128" + ]; + postSetup = '' + ip addr replace dev wg0150 fe80::2574/128 peer fe80::150/128 + ''; + listenPort = 50150; + allowedIPsAsRoutes = false; + peers = [ + { + allowedIPs = [ "fe80::/10" "fd00::/8" ]; + endpoint = "fra.darkpoint.xyz:22574"; + publicKey = "nfoxTtmJdBdxNR3TmfVLG13KA5E+ZtU+uIGCegxrxxw="; + } + ]; + privateKeyFile = config.sops.secrets.dn42-router-general-wireguard-key.path; + }; # e1mo wg0565 = { ips = [ @@ -238,6 +257,13 @@ ]; wireguardPeers = [ + { + peerName = "peer_0150"; + remoteAddress = "fe80::150"; + interfaceName = "wg0150"; + remoteAsn = "4242420150"; + localAddress = "fe80::2574"; + } { peerName = "peer_0565"; remoteAddress = "fe80::565";