Torjus Håkestad f15c318558
Some checks failed
Run nix flake check / flake-check (push) Has been cancelled
Add wireguard to http proxy
2025-05-15 21:11:46 +02:00

26 lines
599 B
Nix

{ config, ... }:
{
sops.secrets.wireguard_private_key = {
sopsFile = ../../secrets/http-proxy/wireguard.yaml;
key = "wg_private_key";
};
networking.wireguard = {
enable = true;
interfaces = {
wg0 = {
ips = [ "10.69.222.2/24" ];
listenPort = 51820;
privateKeyFile = config.sops.secrets.wireguard_private_key.path;
peers = [
{
publicKey = "32Rb13wExcy8uI92JTnFdiOfkv0mlQ6f181WA741DHs=";
allowedIPs = [ "10.69.222.0/24" ];
persistentKeepalive = 25;
}
];
};
};
};
}