nix fmt; specify allowedIPs for wg peer

This commit is contained in:
xqtc161 2024-06-15 23:08:20 +02:00
parent 0bf22732c4
commit 28c73eaba5
4 changed files with 21 additions and 9 deletions

View file

@ -126,11 +126,11 @@ with lib; {
# Enable the OpenSSH daemon. # Enable the OpenSSH daemon.
services.openssh.enable = true; services.openssh.enable = true;
# programs.ssh.extraConfig = '' # programs.ssh.extraConfig = ''
# Host frotting # Host frotting
# HostName 2a0f:be01:0:100::a3 # HostName 2a0f:be01:0:100::a3
# User communism # User communism
# ''; # '';
services.mullvad-vpn.enable = true; services.mullvad-vpn.enable = true;

View file

@ -41,6 +41,6 @@
services.resolved.enable = true; services.resolved.enable = true;
services.resolved.extraConfig = '' services.resolved.extraConfig = ''
DNS=185.12.64.1 185.12.64.2 2a01:4ff:ff00::add:1 2a01:4ff:ff00::add:2 DNS=185.12.64.1 185.12.64.2 2a01:4ff:ff00::add:1 2a01:4ff:ff00::add:2
''; '';
} }

View file

@ -1,6 +1,9 @@
{config, lib, inputs, ...}:
{ {
config,
lib,
inputs,
...
}: {
systemd.mounts."frotting" = { systemd.mounts."frotting" = {
}; };
} }

View file

@ -10,7 +10,12 @@
networking.wireguard.interfaces = { networking.wireguard.interfaces = {
wg0 = { wg0 = {
ips = [/* "2a0f:be01:fe:fa1::1/64" */ "2a01:4f8:10a:1aab:f000::1/80"]; ips = [
/*
"2a0f:be01:fe:fa1::1/64"
*/
"2a01:4f8:10a:1aab:f000::1/80"
];
listenPort = 51820; listenPort = 51820;
@ -20,9 +25,13 @@
{ {
#anner #anner
publicKey = "5ar4lh3Ra4TRmUJeeBtPgDvZnAkGssJDUN53y9oa3So="; publicKey = "5ar4lh3Ra4TRmUJeeBtPgDvZnAkGssJDUN53y9oa3So=";
allowedIPs = ["2a0f:be01::/40"]; allowedIPs = [
"2a0f:be01:0:100::/64"
"2a0f:be01:0:200::/64"
"2a0f:be01:fe:f00::/56"
];
endpoint = "[2a0f:be01::1]:51822"; endpoint = "[2a0f:be01::1]:51822";
persistentKeepalive = 15; persistentKeepalive = 15;
} }
]; ];
}; };