clerie/nixfiles
1
0
Fork 0
Code Activity

hosts/dn42-il-gw1: Add peering with pilz

Browse Source
This commit is contained in:
clerie
2025-12-03 21:51:12 +01:00
parent 8b947f26ad
commit eb20ced361
2 changed files with 32 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
hosts/dn42-il-gw1/configuration.nix
View File

@@ -43,6 +43,9 @@
networking.wireguard.enable = true;
networking.wireguard.interfaces = {
# dn42-router-general-wireguard-key public key:
# r38qvXqu26x4f6yUGxg44Ji4db/g2HK7RZwG7Boh+38=
# e1mo
wg0565 = {
ips = [
@@ -64,6 +67,25 @@
];
privateKeyFile = config.sops.secrets.wg0565.path;
};
# pilz
wg0663 = {
ips = [
"fe80::1111/128"
];
postSetup = ''
ip addr replace dev wg0663 fe80::1111/128 peer fe80::acab/128
'';
listenPort = 50663;
allowedIPsAsRoutes = false;
peers = [
{
allowedIPs = [ "fe80::/10" "fd00::/8" ];
endpoint = "dn42.ams1.as214958.net:163";
publicKey = "NxHkdwZPVL+3HdrHTFOslUpUckTf0dzEG9qpZ0FTBnA=";
}
];
privateKeyFile = config.sops.secrets.dn42-router-general-wireguard-key.path;
};
# prefixlabs
# https://prefixlabs.net/
wg1240 = {
@@ -223,6 +245,13 @@
remoteAsn = "4242420565";
localAddress = "fe80::2574";
}
{
peerName = "peer_0663";
remoteAddress = "fe80::acab";
interfaceName = "wg0663";
remoteAsn = "4242420663";
localAddress = "fe80::1111";
}
{
peerName = "peer_1240_de_01";
remoteAddress = "fe80::1240:11";