imterah/nix-infra
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: imterah:9c2e6c65a60471c258975282422c4a1522b01d99
Branches Tags
imterah:main
...
compare: imterah:8c4f84cf1ab5634ca283b0732738fa96cfaa684f
Branches Tags
imterah:main

2 commits
9c2e6c65a6 ... 8c4f84cf1a

Author SHA1 Message Date
imterah
8c4f84cf1a
chore: Add wireguard configuration 2025-05-06 08:47:03 -04:00
imterah
889b5e421f
flake.lock: Update 
Flake lock file updates:

• Updated input 'nix-secrets':
    'git+https://git.terah.dev/imterah/sops?ref=main&rev=c07d110d71e32ff5fabf0219bc9cadab47d3d2a7&shallow=1' (2025-05-05)
  → 'git+https://git.terah.dev/imterah/sops?ref=main&rev=7851d29bba582893f904cf7b9244abd7adaa0068&shallow=1' (2025-05-06)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/5e3e92b16d6fdf9923425a8d4df7496b2434f39c?narHash=sha256-ePyTpKEJTgX0gvgNQWd7tQYQ3glIkbqcW778RpHlqgA%3D' (2025-04-22)
  → 'github:Mic92/sops-nix/e93ee1d900ad264d65e9701a5c6f895683433386?narHash=sha256-PxrrSFLaC7YuItShxmYbMgSuFFuwxBB%2Bqsl9BZUnRvg%3D' (2025-05-05)
 2025-05-06 08:46:33 -04:00
3 changed files with 26 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

12
flake.lock generated
View file

@ -90,10 +90,10 @@
"nix-secrets": { "nix-secrets": {
"flake": false, "flake": false,
"locked": { "locked": {
"lastModified": 1746456167, "lastModified": 1746533618,
"narHash": "sha256-wOfe72o2Su+GcuHO6JERTzgCeo7O3mGtjgvfiD/KjGQ=", "narHash": "sha256-DWSvionIGvuSO4C+b/DEYBCOI+eeKg4Zpx/JzV27Alg=",
"ref": "main", "ref": "main",
"rev": "c07d110d71e32ff5fabf0219bc9cadab47d3d2a7", "rev": "7851d29bba582893f904cf7b9244abd7adaa0068",
"shallow": true, "shallow": true,
"type": "git", "type": "git",
"url": "https://git.terah.dev/imterah/sops" "url": "https://git.terah.dev/imterah/sops"
@ -185,11 +185,11 @@
"nixpkgs": "nixpkgs_4" "nixpkgs": "nixpkgs_4"
}, },
"locked": { "locked": {
"lastModified": 1745310711, "lastModified": 1746485181,
"narHash": "sha256-ePyTpKEJTgX0gvgNQWd7tQYQ3glIkbqcW778RpHlqgA=", "narHash": "sha256-PxrrSFLaC7YuItShxmYbMgSuFFuwxBB+qsl9BZUnRvg=",
"owner": "Mic92", "owner": "Mic92",
"repo": "sops-nix", "repo": "sops-nix",
"rev": "5e3e92b16d6fdf9923425a8d4df7496b2434f39c", "rev": "e93ee1d900ad264d65e9701a5c6f895683433386",
"type": "github" "type": "github"
}, },
"original": { "original": {

19
hosts/andromeda/configuration.nix
View file

@ -60,6 +60,25 @@
virtualisation.oci-containers.backend = "docker"; virtualisation.oci-containers.backend = "docker";
# Reverse Proxy setup
networking.wireguard.interfaces = {
wg0 = {
ips = [ "10.10.0.3/24" ];
privateKeyFile = config.sops.secrets.reverse_proxy_client_privkey.path;
table = "69";
postSetup = "ip rule add from 10.10.0.2 table 69";
preShutdown = "ip rule del from 10.10.0.2 table 69";
peers = [{
publicKey = "QXDlW73/+hKJu6CPiCmpSWOXqKvJPC+b7E7iuvRpL2A=";
allowedIPs = [ "0.0.0.0/0" "::/0" ];
endpoint = "terah.dev:55107";
persistentKeepalive = 25;
}];
};
};
# Volumes # Volumes
fileSystems."/mnt/NASBox" = { fileSystems."/mnt/NASBox" = {
device = "192.168.0.3:/mnt/Diskette/KubeData"; device = "192.168.0.3:/mnt/Diskette/KubeData";

2
secrets

@ -1 +1 @@
Subproject commit c07d110d71e32ff5fabf0219bc9cadab47d3d2a7 Subproject commit 7851d29bba582893f904cf7b9244abd7adaa0068