imterah/nix-infra
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

chore: Add wireguard configuration

Browse source
This commit is contained in:
Tera << 8 2025-05-06 08:47:03 -04:00
parent 889b5e421f
commit 8c4f84cf1a
Signed by: imterah
GPG key ID: 8FA7DD57BA6CEA37
2 changed files with 20 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

19
hosts/andromeda/configuration.nix
View file

@ -60,6 +60,25 @@
virtualisation.oci-containers.backend = "docker"; virtualisation.oci-containers.backend = "docker";
# Reverse Proxy setup
networking.wireguard.interfaces = {
wg0 = {
ips = [ "10.10.0.3/24" ];
privateKeyFile = config.sops.secrets.reverse_proxy_client_privkey.path;
table = "69";
postSetup = "ip rule add from 10.10.0.2 table 69";
preShutdown = "ip rule del from 10.10.0.2 table 69";
peers = [{
publicKey = "QXDlW73/+hKJu6CPiCmpSWOXqKvJPC+b7E7iuvRpL2A=";
allowedIPs = [ "0.0.0.0/0" "::/0" ];
endpoint = "terah.dev:55107";
persistentKeepalive = 25;
}];
};
};
# Volumes # Volumes
fileSystems."/mnt/NASBox" = { fileSystems."/mnt/NASBox" = {
device = "192.168.0.3:/mnt/Diskette/KubeData"; device = "192.168.0.3:/mnt/Diskette/KubeData";

2
secrets

@ -1 +1 @@
Subproject commit c07d110d71e32ff5fabf0219bc9cadab47d3d2a7 Subproject commit 7851d29bba582893f904cf7b9244abd7adaa0068