wireguard/ssh: add pub.solar wireguard config

This commit is contained in:
Benjamin Yule Bädorf 2024-04-06 02:35:51 +02:00
parent 3d2b5f7c78
commit 316bd06c0d
Signed by: b12f
GPG key ID: 729956E1124F8F26
2 changed files with 9 additions and 5 deletions

View file

@ -25,8 +25,6 @@ in {
networking.firewall.allowedUDPPorts = [51821]; networking.firewall.allowedUDPPorts = [51821];
systemd.services.wireguard-wg-pub-solar = { systemd.services.wireguard-wg-pub-solar = {
enable = false;
after = [ after = [
"network.target" "network.target"
"network-online.target" "network-online.target"
@ -51,15 +49,19 @@ in {
ips = cfg.ownIPs; ips = cfg.ownIPs;
privateKeyFile = cfg.privateKeyFile; privateKeyFile = cfg.privateKeyFile;
peers = [ peers = [
{ {
endpoint = "flora6.pub.solar:51820"; endpoint = "flora-6.pub.solar:51820";
publicKey = "jtSR5G2P/nm9s8WrVc26Xc/SQLupRxyXE+5eIeqlsTU="; publicKey = "jtSR5G2P/nm9s8WrVc26Xc/SQLupRxyXE+5eIeqlsTU=";
allowedIPs = [ "10.7.6.2/32" "fd00:fae:fae:fae:fae:2::/96" ]; allowedIPs = [ "10.7.6.2/32" "fd00:fae:fae:fae:fae:2::/96" ];
persistentKeepalive = 15;
dynamicEndpointRefreshSeconds = 30;
} }
{ {
endpoint = "nachtigall.pub.solar:51820"; endpoint = "nachtigall.pub.solar:51820";
publicKey = "qzNywKY9RvqTnDO8eLik75/SHveaSk9OObilDzv+xkk="; publicKey = "qzNywKY9RvqTnDO8eLik75/SHveaSk9OObilDzv+xkk=";
allowedIPs = [ "10.7.6.1/32" "fd00:fae:fae:fae:fae:1::/96" ]; allowedIPs = [ "10.7.6.1/32" "fd00:fae:fae:fae:fae:1::/96" ];
persistentKeepalive = 15;
dynamicEndpointRefreshSeconds = 30;
} }
]; ];
}; };

View file

@ -122,10 +122,12 @@ in {
"nachtigall.pub.solar" = { "nachtigall.pub.solar" = {
user = "barkeeper"; user = "barkeeper";
hostname = "10.7.6.1";
}; };
"flora-6.pub.solar" = { "flora-6.pub.solar" = {
user = "barkeeper"; user = "barkeeper";
hostname = "10.7.6.2";
}; };
}; };
}; };