b12f/os
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

feat: make full tunnel wireguard optional

Browse source
This commit is contained in:
Benjamin Bädorf 2024-01-05 15:06:49 +01:00
parent 6e2798a0d4
commit 3a0358d0f8
No known key found for this signature in database
GPG key ID: 1B7BF5B77A521346
1 changed files with 12 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
modules/wireguard-client/default.nix
View file

@ -22,6 +22,14 @@ in {
'';
type = types.path;
};
fullTunnel = mkOption {
description = ''
Whether to tunnel all traffic through the wireguard VPN
'';
default = false;
type = types.bool;
};
};
config = {
@ -59,11 +67,12 @@ in {
# frikandel
publicKey = "p6YKNYBlySKfhTN+wbSsKdoNjzko/XSAiTAlCJzP1jA=";
allowedIPs = [
"0.0.0.0/0"
"10.0.1.0/24"
"::/0"
"fd00:b12f:acab:1312::/64"
];
] ++ (if cfg.fullTunnel then [
"0.0.0.0/0"
"::/0"
] else []);
endpoint = "vpn.b12f.io:51899";
persistentKeepalive = 25;
}