added wireguard to desktop

2021-09-23 13:50:10 +02:00
parent 0ace2043f0
commit 89f9e98ec2
5 changed files with 38 additions and 2 deletions
--- a/machine/mini.nix
+++ b/machine/mini.nix
@ -24,6 +24,22 @@
      # allowedTCPPorts = [ 6443 ];
    };
    networkmanager.enable = true;
+    wireguard.interfaces = {
+      wg0 = {
+        ips = [ "10.100.0.3/24" ];
+        privateKey = secrets.wireguard-mini-private;
+
+        peers = [
+          {
+            publicKey = secrets.wireguard-vps-public;
+            presharedKey = secrets.wireguard-preshared;
+            allowedIPs = [ "10.100.0.0/24" ];
+            endpoint = "szczepan.ski:51820";
+            persistentKeepalive = 25;
+          }
+        ];
+      };
+    };
  };

  services.k3s.enable = true;