nixos-config/hosts/x86_64-linux/beleth/wireguard.nix

40 lines
754 B
Nix

{
config,
lib,
inputs,
...
}: {
networking.firewall = {
allowedUDPPorts = [51820];
};
networking.wireguard.interfaces = {
wg0 = {
ips = [
/*
"2a0f:be01:fe:fa1::1/64"
*/
"2a01:4f8:10a:1aab:f000::1/80"
];
listenPort = 51820;
privateKeyFile = "/home/xqtc/wireguard-keys/private";
peers = [
# {
# #anner
# publicKey = "5ar4lh3Ra4TRmUJeeBtPgDvZnAkGssJDUN53y9oa3So=";
# allowedIPs = [
# "2a0f:be01:0:100::/64"
# "2a0f:be01:0:200::/64"
# "2a0f:be01:fe:f00::/56"
# ];
# endpoint = "[2a0f:be01::1]:51822";
# # persistentKeepalive = 15;
# }
];
};
};
}