nix fmt; specify allowedIPs for wg peer

This commit is contained in:
xqtc161 2024-06-15 23:08:20 +02:00
parent 0bf22732c4
commit 28c73eaba5
4 changed files with 21 additions and 9 deletions

View file

@ -126,11 +126,11 @@ with lib; {
# Enable the OpenSSH daemon.
services.openssh.enable = true;
# programs.ssh.extraConfig = ''
# Host frotting
# programs.ssh.extraConfig = ''
# Host frotting
# HostName 2a0f:be01:0:100::a3
# User communism
# '';
# '';
services.mullvad-vpn.enable = true;

View file

@ -41,6 +41,6 @@
services.resolved.enable = true;
services.resolved.extraConfig = ''
DNS=185.12.64.1 185.12.64.2 2a01:4ff:ff00::add:1 2a01:4ff:ff00::add:2
DNS=185.12.64.1 185.12.64.2 2a01:4ff:ff00::add:1 2a01:4ff:ff00::add:2
'';
}

View file

@ -1,6 +1,9 @@
{config, lib, inputs, ...}:
{
config,
lib,
inputs,
...
}: {
systemd.mounts."frotting" = {
};
}

View file

@ -10,7 +10,12 @@
networking.wireguard.interfaces = {
wg0 = {
ips = [/* "2a0f:be01:fe:fa1::1/64" */ "2a01:4f8:10a:1aab:f000::1/80"];
ips = [
/*
"2a0f:be01:fe:fa1::1/64"
*/
"2a01:4f8:10a:1aab:f000::1/80"
];
listenPort = 51820;
@ -20,9 +25,13 @@
{
#anner
publicKey = "5ar4lh3Ra4TRmUJeeBtPgDvZnAkGssJDUN53y9oa3So=";
allowedIPs = ["2a0f:be01::/40"];
allowedIPs = [
"2a0f:be01:0:100::/64"
"2a0f:be01:0:200::/64"
"2a0f:be01:fe:f00::/56"
];
endpoint = "[2a0f:be01::1]:51822";
persistentKeepalive = 15;
persistentKeepalive = 15;
}
];
};