RoastedCheese/niksos
1
0
Fork 0
forked from poz/niksos
Code Pull requests Activity

I don't understand shit

Browse source
This commit is contained in:
jacekpoz 2023-07-16 11:21:14 +02:00
parent 44e57a2de6
commit b00861e0ae
2 changed files with 44 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
hosts/chmura/default.nix
View file

@ -4,5 +4,6 @@ _: {
./configuration.nix
./grafana.nix
./hardware-configuration.nix
./wireguard.nix
];
}

43
hosts/chmura/wireguard.nix Normal file
View file

@ -0,0 +1,43 @@
{
config,
pkgs,
inputs,
...
}: {
networking.nat = {
enable = true;
externalInterface = "enp6s0";
internalInterfaces = [ "wg0" ];
};
networking.firewall.allowedTCPPorts = [ 51820 ];
networking.firewall.allowedUDPPorts = [ 51820 ];
networking.wireguard.interfaces = {
wg0 = {
ips = [ "192.168.15.17/24" ];
listenPort = 51820;
postSetup = ''
${pkgs.iptables}/bin/iptables -t nat -A POSTROUTING -s 192.168.15.0/24 -o eth0 -j MASQUERADE
'';
postShutdown = ''
${pkgs.iptables}/bin/iptables -t nat -D POSTROUTING -s 192.168.15.0/24 -o eth0 -j MASQUERADE
'';
privateKeyFile = "/home/chmura/.wg/private";
peers = [
{
# laptop with arch
publicKey = "yYCaxmZfyQQiOzlZuvNqbsY96j/UkqCh/+2guEqTuho=";
allowedIPs = [ "192.168.15.0/24" ];
}
{
# phone
publicKey = "aIz3n7fmtc85Td3bLa/78s90cxjpGw2LI098fpWcAhk=";
allowedIPs = [ "192.168.15.0/24" ];
}
];
};
};
}