blob: cc4f2fa641a6929b2d35941b035f5e96f4067f29 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
|
{
networking.firewall = {
allowedUDPPorts = [ 54321 ];
};
networking.nat.enable = true;
networking.wireguard.interfaces = {
wg0 = {
ips = [ "10.100.0.1/24" ];
listenPort = 54321;
privateKeyFile = "/etc/wireguard/private";
peers = [
{ # obelix
publicKey = "RrsNZKZ17Ol1WHxZesLnenGKnqxiQlE0T8xFP6/5mBE=";
allowedIPs = [ "10.100.0.2" ];
}
{ # majestix
publicKey = "Tkoaewh9HB5rIuJVrFgClRF4x7prOtIlSJjiTYCpxis=";
allowedIPs = [ "10.100.0.3" ];
}
{ # athena
publicKey = "t4SzRV/olVdzAKauJOwFau3I0fTISUvbOAaKGZd6ezU=";
allowedIPs = [ "10.100.0.4" ];
}
];
};
};
}
|