Noratrieb/vps
1
0
Fork 0
mirror of https://github.com/Noratrieb/vps.git synced 2026-01-16 09:35:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

dynamic wireguard mesh

Browse source
This commit is contained in:
nora 2024-07-31 20:17:10 +02:00
parent cfe47e65c0
commit 478b587a41
2 changed files with 36 additions and 43 deletions
Download patch file Download diff file Expand all files Collapse all files

27
newinfra/nix/modules/wg-mesh/default.nix
View file

@ -1,7 +1,32 @@
{ ... }: {
{ name, config, networkingConfig, ... }:
let
wgSettings = (builtins.getAttr name networkingConfig).wg;
listenPort = 51820;
in
{
# TODO: put the actual setup here.
networking.hosts = {
"10.0.0.1" = [ "vps1.local" ];
"10.0.0.3" = [ "vps3.local" ];
};
age.secrets.wg_private.file = ../../secrets/wg_private_${name}.age;
networking.wg-quick.interfaces = {
wg0 = {
address = [ "${wgSettings.privateIP}/24" ];
inherit listenPort;
privateKeyFile = config.age.secrets.wg_private.path;
peers = map
(peer:
let peerConfig = (builtins.getAttr peer networkingConfig).wg;
in {
inherit (peerConfig) publicKey;
endpoint = "${peer}.infra.noratrieb.dev:${toString listenPort}";
allowedIPs = [ "${peerConfig.privateIP}/32" ];
}
)
wgSettings.peers;
};
};
}