clerie
/
nixfiles
1
0
Fork 0
Code

Add peer perflyst

This commit is contained in:
clerie 2020-12-09 19:06:34 +01:00
parent cfedde1adb
commit fb42564cb0
1 changed files with 26 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
hosts/dn42-il-gw1/configuration.nix
View File

@ -131,6 +131,27 @@
];
privateKeyFile = "/var/src/secrets/wireguard/wg1280";
};
# perflyst
wg1302 = {
ips = [
"fe80::a14e/128"
# peer fe80::a14d/128
];
postSetup = ''
ip -6 route flush dev wg1302
ip addr del dev wg1302 fe80::a14e/128 && ip addr add dev wg1302 fe80::a14e/128 peer fe80::a14d/128
'';
listenPort = 51302;
allowedIPsAsRoutes = false;
peers = [
{
allowedIPs = [ "fe80::/10" "fd00::/8" ];
endpoint = "[2a03:4000:6:f6ed::1]:22574";
publicKey = "TSPvvpMY8dCFk6gd58aYtkibtqUn8EzIF6dXP52b3y8=";
}
];
privateKeyFile = "/var/src/secrets/wireguard/wg1302";
};
};
petabyte.policyrouting = {
@ -275,6 +296,11 @@
source address fde3:4c0d:2836:ff00::21;
}
protocol bgp peer_1302 from bgp_peer {
neighbor fe80::a14d%wg1302 as 4242421302;
source address fe80::a14e;
}
protocol device {
scan time 10;
}