clerie/nixfiles
1
0
Fork 0
Code Activity

hosts/dn42-il-gw1: Add darkpoint peering

Browse Source
This commit is contained in:
clerie
2025-12-04 16:22:39 +01:00
parent eb20ced361
commit c6322949fe
1 changed files with 26 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
hosts/dn42-il-gw1/configuration.nix
View File

@@ -46,6 +46,25 @@
# dn42-router-general-wireguard-key public key: # dn42-router-general-wireguard-key public key:
# r38qvXqu26x4f6yUGxg44Ji4db/g2HK7RZwG7Boh+38= # r38qvXqu26x4f6yUGxg44Ji4db/g2HK7RZwG7Boh+38=
# darkpoint
wg0150 = {
ips = [
"fe80::2574/128"
];
postSetup = ''
ip addr replace dev wg0150 fe80::2574/128 peer fe80::150/128
'';
listenPort = 50150;
allowedIPsAsRoutes = false;
peers = [
{
allowedIPs = [ "fe80::/10" "fd00::/8" ];
endpoint = "fra.darkpoint.xyz:22574";
publicKey = "nfoxTtmJdBdxNR3TmfVLG13KA5E+ZtU+uIGCegxrxxw=";
}
];
privateKeyFile = config.sops.secrets.dn42-router-general-wireguard-key.path;
};
# e1mo # e1mo
wg0565 = { wg0565 = {
ips = [ ips = [
@@ -238,6 +257,13 @@
]; ];
wireguardPeers = [ wireguardPeers = [
{
peerName = "peer_0150";
remoteAddress = "fe80::150";
interfaceName = "wg0150";
remoteAsn = "4242420150";
localAddress = "fe80::2574";
}
{ {
peerName = "peer_0565"; peerName = "peer_0565";
remoteAddress = "fe80::565"; remoteAddress = "fe80::565";