chaos/nixfiles
1
0
Fork 0
Code Issues 2 Releases Activity

more wg

Browse source
This commit is contained in:
Chaos 2022-11-11 21:17:57 +00:00
parent 2f97bcd7fc
commit 3198c30933
No known key found for this signature in database
4 changed files with 27 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
hosts/tablet/profiles/wireguard.nix
View file

@ -23,6 +23,14 @@ in {
endpoint = "vault.servers.genderfucked.monster:51820"; endpoint = "vault.servers.genderfucked.monster:51820";
persistentKeepalive = 25; persistentKeepalive = 25;
} }
# storage
{
publicKey = "biNNeCkjAWi2jUVoL5+1pBtXGa3OFZi4DltB2dqGjGg=";
presharedKeyFile = "${secrets-db.wg_preshared_storage.path}";
allowedIPs = [ "10.69.42.4/32" ];
endpoint = "storage.servers.genderfucked.monster:51820";
persistentKeepalive = 25;
}
]; ];
}; };
}; };

7
hosts/vault/profiles/wireguard.nix
View file

@ -22,6 +22,13 @@ in {
presharedKeyFile = "${secrets-db.wg_preshared_tablet.path}"; presharedKeyFile = "${secrets-db.wg_preshared_tablet.path}";
allowedIPs = [ "10.69.42.2/32" ]; allowedIPs = [ "10.69.42.2/32" ];
} }
# storage
{
publicKey = "biNNeCkjAWi2jUVoL5+1pBtXGa3OFZi4DltB2dqGjGg=";
presharedKeyFile = "${secrets-db.wg_preshared_storage.path}";
endpoint = "storage.servers.genderfucked.monster:51820";
allowedIPs = [ "10.69.42.4/32" ];
}
]; ];
}; };
}; };

6
hosts/vault/secrets-db.nix
View file

@ -29,4 +29,10 @@
permissions = "660"; permissions = "660";
path = "/secrets/wg_preshared_tablet"; path = "/secrets/wg_preshared_tablet";
}; };
wg_preshared_storage = {
user = "root";
group = "root";
permissions = "660";
path = "/secrets/wg_preshared_storage";
};
} }

6
hosts/vault/secrets.nix
View file

@ -47,6 +47,12 @@ in {
simple_get "/private-public-keys/wireguard/chaos-internal/vault" .preshared_keys.tablet > $file simple_get "/private-public-keys/wireguard/chaos-internal/vault" .preshared_keys.tablet > $file
chown ${secrets-db.wg_preshared_tablet.user}:${secrets-db.wg_preshared_tablet.group} $file chown ${secrets-db.wg_preshared_tablet.user}:${secrets-db.wg_preshared_tablet.group} $file
chmod ${secrets-db.wg_preshared_tablet.permissions} $file chmod ${secrets-db.wg_preshared_tablet.permissions} $file
file=${secrets-db.wg_preshared_storage.path}
echo $file
simple_get "/private-public-keys/wireguard/chaos-internal/vault" .preshared_keys.storage > $file
chown ${secrets-db.wg_preshared_storage.user}:${secrets-db.wg_preshared_storage.group} $file
chmod ${secrets-db.wg_preshared_storage.permissions} $file
'') '')
]; ];
} }