jonas/.hive
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

System Gen162 @ 2025-04-23-23:20:41

Browse Source
This commit is contained in:
Jonas Röger 2025-04-23 23:20:42 +02:00
parent 3cb4093f45
commit 002308415d
2 changed files with 10 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
modules/networking/wireguard/client.nix
View File

@ -8,6 +8,11 @@
in {
options.networking.wg.client = {
enable = lib.mkEnableOption "Enable WireGuard client";
autoConnect = lib.mkOption {
type = lib.types.bool;
default = false;
description = "Automatically connect to the WireGuard server with systemd";
};
privateKeyFile = lib.mkOption {
type = lib.types.path;
description = "Path to the private key file for the WireGuard client";
@ -23,5 +28,9 @@ in {
peers.harbor
];
};
systemd.services."wg-quick@wg0".wantedBy =
if cfg.autoConnect
then lib.mkDefault []
else lib.mkForce [];
};
}

9
modules/networking/wireguard/server.nix
View File

@ -1,6 +1,5 @@
{
config,
pkgs,
lib,
...
}: let
@ -27,16 +26,10 @@ in {
networking.nat.externalInterface = "eth0";
networking.nat.internalInterfaces = ["wg0"];
# Interface with NAT for internet routing
# Interface without internet routing
networking.wireguard.interfaces."wg0" = {
ips = ["10.10.10.1/24"];
listenPort = cfg.port;
postSetup = ''
${pkgs.iptables}/bin/iptables -t nat -A POSTROUTING -s 10.10.10.0/24 -o eth0 -j MASQUERADE
'';
postShutdown = ''
${pkgs.iptables}/bin/iptables -t nat -D POSTROUTING -s 10.10.10.0/24 -o eth0 -j MASQUERADE
'';
inherit (cfg) privateKeyFile;