hosts/dn42-il-gw1: Add tbspace peering
This commit is contained in:
@@ -223,6 +223,25 @@
|
|||||||
];
|
];
|
||||||
privateKeyFile = config.sops.secrets.wg1718.path;
|
privateKeyFile = config.sops.secrets.wg1718.path;
|
||||||
};
|
};
|
||||||
|
# tbspace
|
||||||
|
wg6190 = {
|
||||||
|
ips = [
|
||||||
|
"fe80::2574/128"
|
||||||
|
];
|
||||||
|
postSetup = ''
|
||||||
|
ip addr replace dev wg6190 fe80::2574/128 peer fe80::1299:e/128
|
||||||
|
'';
|
||||||
|
listenPort = 56190;
|
||||||
|
allowedIPsAsRoutes = false;
|
||||||
|
peers = [
|
||||||
|
{
|
||||||
|
allowedIPs = [ "fe80::/10" "fd00::/8" ];
|
||||||
|
endpoint = "dn42.tbspace.de:49168";
|
||||||
|
publicKey = "skvyDl81J8Zu3Ziem+7JKeU4UYLhhWt7gWelg8nEbzQ=";
|
||||||
|
}
|
||||||
|
];
|
||||||
|
privateKeyFile = config.sops.secrets.dn42-router-general-wireguard-key.path;
|
||||||
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
networking.firewall.allowedUDPPorts = [
|
networking.firewall.allowedUDPPorts = [
|
||||||
@@ -320,6 +339,13 @@
|
|||||||
remoteAsn = "4242421718";
|
remoteAsn = "4242421718";
|
||||||
localAddress = "fe80::2574";
|
localAddress = "fe80::2574";
|
||||||
}
|
}
|
||||||
|
{
|
||||||
|
peerName = "peer_6190";
|
||||||
|
remoteAddress = "fe80::1299:e";
|
||||||
|
interfaceName = "wg6190";
|
||||||
|
remoteAsn = "76190";
|
||||||
|
localAddress = "fe80::2574";
|
||||||
|
}
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user