jonas/.hive
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

System Gen165 @ 2025-04-23-23:50:24

Browse Source
This commit is contained in:
Jonas Röger 2025-04-23 23:50:25 +02:00
parent 3cf3a6b0be
commit 171c5bf9c3
3 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
modules/networking/wireguard/client.nix
View File

@ -8,6 +8,11 @@
in { in {
options.networking.wg.client = { options.networking.wg.client = {
enable = lib.mkEnableOption "Enable WireGuard client"; enable = lib.mkEnableOption "Enable WireGuard client";
port = lib.mkOption {
type = lib.types.port;
default = 51820;
description = "Port for WireGuard client";
};
autoConnect = lib.mkOption { autoConnect = lib.mkOption {
type = lib.types.bool; type = lib.types.bool;
default = false; default = false;
@ -20,17 +25,15 @@ in {
}; };
config = lib.mkIf cfg.enable { config = lib.mkIf cfg.enable {
networking.wg-quick.interfaces.wg0 = { networking.firewall.allowedUDPPorts = [cfg.port];
inherit (peers.jonas) address; networking.wireguard.interfaces.wg0 = {
inherit (peers.jonas) ips;
inherit (cfg) privateKeyFile; inherit (cfg) privateKeyFile;
listenPort = cfg.port;
peers = [ peers = [
peers.harbor peers.harbor
]; ];
}; };
systemd.services.wg-quick-wg0.wantedBy =
if cfg.autoConnect
then lib.mkDefault []
else lib.mkForce [];
}; };
} }

2
modules/networking/wireguard/peers.nix
View File

@ -14,7 +14,7 @@
jonas = { jonas = {
publicKey = "oPMapC1S3TPe+/YQulG0AsVsOu+MzZY7huvAAXVJEnM="; publicKey = "oPMapC1S3TPe+/YQulG0AsVsOu+MzZY7huvAAXVJEnM=";
address = ["10.10.10.2/24"]; ips = ["10.10.10.2/24"];
allowedIPs = ["10.10.10.2/32"]; allowedIPs = ["10.10.10.2/32"];
}; };
} }

5
modules/networking/wireguard/server.nix
View File

@ -20,11 +20,8 @@ in {
}; };
config = lib.mkIf cfg.enable { config = lib.mkIf cfg.enable {
# Firewall and NAT configuration # Firewall rule
networking.firewall.allowedUDPPorts = [cfg.port]; networking.firewall.allowedUDPPorts = [cfg.port];
networking.nat.enable = true;
networking.nat.externalInterface = "eth0";
networking.nat.internalInterfaces = ["wg0"];
# Interface without internet routing # Interface without internet routing
networking.wireguard.interfaces."wg0" = { networking.wireguard.interfaces."wg0" = {