hosts/dn42-il-gw1: Add tbspace peering
This commit is contained in:
@@ -223,6 +223,25 @@
|
||||
];
|
||||
privateKeyFile = config.sops.secrets.wg1718.path;
|
||||
};
|
||||
# tbspace
|
||||
wg6190 = {
|
||||
ips = [
|
||||
"fe80::2574/128"
|
||||
];
|
||||
postSetup = ''
|
||||
ip addr replace dev wg6190 fe80::2574/128 peer fe80::1299:e/128
|
||||
'';
|
||||
listenPort = 56190;
|
||||
allowedIPsAsRoutes = false;
|
||||
peers = [
|
||||
{
|
||||
allowedIPs = [ "fe80::/10" "fd00::/8" ];
|
||||
endpoint = "dn42.tbspace.de:49168";
|
||||
publicKey = "skvyDl81J8Zu3Ziem+7JKeU4UYLhhWt7gWelg8nEbzQ=";
|
||||
}
|
||||
];
|
||||
privateKeyFile = config.sops.secrets.dn42-router-general-wireguard-key.path;
|
||||
};
|
||||
};
|
||||
|
||||
networking.firewall.allowedUDPPorts = [
|
||||
@@ -320,6 +339,13 @@
|
||||
remoteAsn = "4242421718";
|
||||
localAddress = "fe80::2574";
|
||||
}
|
||||
{
|
||||
peerName = "peer_6190";
|
||||
remoteAddress = "fe80::1299:e";
|
||||
interfaceName = "wg6190";
|
||||
remoteAsn = "76190";
|
||||
localAddress = "fe80::2574";
|
||||
}
|
||||
];
|
||||
};
|
||||
|
||||
|
||||
Reference in New Issue
Block a user