flake.lock: Update bij

flake.lock

@@ -27,11 +27,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1748808701,
+        "lastModified": 1766404451,
-        "narHash": "sha256-IEer4ypv/tL2zzo7nkgyg7xdK6P+Mc/22oPctEgwhiw=",
+        "narHash": "sha256-dDM0raZ0O/a59aBRQx3HP6n+Op7Who+FTEL/4+OdnuA=",
         "ref": "refs/heads/main",
-        "rev": "5f3748df43e6b6e49cc0a23557a378ef37952483",
+        "rev": "8f5ea5eace436c5325eca8e6bd6b37aff4fbe935",
-        "revCount": 5,
+        "revCount": 9,
         "type": "git",
         "url": "https://git.clerie.de/clerie/bij.git"
       },

hosts/dn42-il-gw1/configuration.nix

@@ -243,6 +243,22 @@
       ];
       privateKeyFile = config.sops.secrets.dn42-router-general-wireguard-key.path;
     };
+    # fsinfo tu-dortmund
+    wg2870 = {
+      ips = [
+        "fdd6:a7d6:3090::42:2574:2574/112"
+      ];
+      listenPort = 52870;
+      allowedIPsAsRoutes = false;
+      peers = [
+        {
+          allowedIPs = [ "fe80::/10" "fd00::/8" ];
+          endpoint = "foss-ag-2.fsinfo.cs.tu-dortmund.de:22574";
+          publicKey = "JfFYi7koXoZfh6oQBeE6vasQPrQAKrUtBEzP3y9pujs=";
+        }
+      ];
+      privateKeyFile = config.sops.secrets.dn42-router-general-wireguard-key.path;
+    };
     # jona / cryne
     wg3402 = {
       ips = [
@@ -315,6 +331,7 @@
     51411 # wg1411
     51718 # wg1718
     52189 # wg2189
+    52870 # wg2870
     53402 # wg3402
     54719 # wg4719
     56190 # wg6190
@@ -411,6 +428,13 @@
         remoteAsn = "4242422189";
         localAddress = "fe80::2574";
       }
+      {
+        peerName = "peer_2870";
+        remoteAddress = "fdd6:a7d6:3090::42:2870:2870";
+        interfaceName = "wg2870";
+        remoteAsn = "4242422870";
+        localAddress = "fdd6:a7d6:3090::42:2574:2574";
+      }
       {
         peerName = "peer_3402";
         remoteAddress = "fe80::3402";