feat: enable ipv6 in wireguard
This commit is contained in:
parent
615ef9a856
commit
98bd9d30d8
|
@ -10,7 +10,7 @@
|
|||
pub-solar.wireguard-client = {
|
||||
ownIPs = [
|
||||
"10.0.1.6/32"
|
||||
"fd00:acab:1312:acab:6::/128"
|
||||
"fd00:b12f:acab:1312:acab:6::/32"
|
||||
];
|
||||
wireguardPrivateKeyFile = "/run/agenix/wg-private-key";
|
||||
};
|
||||
|
|
|
@ -10,7 +10,7 @@
|
|||
pub-solar.wireguard-client = {
|
||||
ownIPs = [
|
||||
"10.0.1.5/32"
|
||||
"fd00:acab:1312:acab:5::/128"
|
||||
"fd00:b12f:acab:1312:acab:5::/32"
|
||||
];
|
||||
wireguardPrivateKeyFile = "/run/agenix/wg-private-key";
|
||||
};
|
||||
|
|
|
@ -10,7 +10,7 @@
|
|||
pub-solar.wireguard-client = {
|
||||
ownIPs = [
|
||||
"10.0.1.3/32"
|
||||
"fd00:acab:1312:acab:3::/128"
|
||||
"fd00:b12f:acab:1312:acab:3::/32"
|
||||
];
|
||||
wireguardPrivateKeyFile = "/run/agenix/wg-private-key";
|
||||
};
|
||||
|
|
|
@ -8,9 +8,9 @@
|
|||
|
||||
boot.kernel.sysctl = {
|
||||
"net.ipv4.ip_forward" = 1;
|
||||
"net.ipv6.conf.all.forwarding" = 1;
|
||||
"net.ipv6.conf.all.accept_ra" = 1;
|
||||
"net.ipv6.conf.all.accept_ra_pinfo" = 1;
|
||||
"net.ipv6.conf.wg0.forwarding" = 1;
|
||||
"net.ipv6.conf.wg0.accept_ra" = 1;
|
||||
"net.ipv6.conf.wg0.accept_ra_pinfo" = 1;
|
||||
};
|
||||
|
||||
networking.nat = {
|
||||
|
|
|
@ -25,7 +25,7 @@
|
|||
# Caddy reverse proxy for local services like cups
|
||||
services.caddy = {
|
||||
globalConfig = ''
|
||||
default_bind 192.168.178.2 2a02:908:5b1:e3c0:3077:2:: 10.0.1.2 fd00:acab:1312:acab:2::
|
||||
default_bind 192.168.178.2 2a02:908:5b1:e3c0:3077:2:: 10.0.1.2 fd00:b12f:acab:1312:acab:2::
|
||||
auto_https off
|
||||
'';
|
||||
};
|
||||
|
@ -33,7 +33,10 @@
|
|||
age.secrets.wg-private-key.file = "${flake.self}/secrets/wg-private-pie.age";
|
||||
|
||||
pub-solar.wireguard-client = {
|
||||
ownIPs = [ "10.0.1.2/32" ];
|
||||
ownIPs = [
|
||||
"10.0.1.2/32"
|
||||
"fd00:b12f:acab:1312:acab:2::/32"
|
||||
];
|
||||
wireguardPrivateKeyFile = "/run/agenix/wg-private-key";
|
||||
};
|
||||
}
|
||||
|
|
|
@ -19,7 +19,7 @@
|
|||
|
||||
# Allow from wireguard
|
||||
"10.0.1.0/24 allow"
|
||||
"fd00:acab:1312:acab::/48 allow"
|
||||
"fd00:b12f:acab:1312:acab::/48 allow"
|
||||
];
|
||||
local-zone = [
|
||||
"\"b12f.io\" static"
|
||||
|
@ -33,23 +33,23 @@
|
|||
"\"droppie.local. 10800 IN AAAA 2a02:908:5b1:e3c0:3077:3::\""
|
||||
|
||||
"\"droppie.b12f.io. 10800 IN A 10.0.1.3\""
|
||||
"\"droppie.b12f.io. 10800 IN AAAA fd00:acab:1312:acab:3::\""
|
||||
"\"droppie.b12f.io. 10800 IN AAAA fd00:b12f:acab:1312:acab:3::\""
|
||||
"\"backup.b12f.io. 10800 IN A 10.0.1.3\""
|
||||
"\"backup.b12f.io. 10800 IN AAAA fd00:acab:1312:acab:3::\""
|
||||
"\"backup.b12f.io. 10800 IN AAAA fd00:b12f:acab:1312:acab:3::\""
|
||||
|
||||
"\"pie.local. 10800 IN A 192.168.178.2\""
|
||||
"\"pie.local. 10800 IN AAAA 2a02:908:5b1:e3c0:3077:2::\""
|
||||
|
||||
"\"pie.b12f.io. 10800 IN A 10.0.1.2\""
|
||||
"\"pie.b12f.io. 10800 IN AAAA fd00:acab:1312:acab:2::\""
|
||||
"\"pie.b12f.io. 10800 IN AAAA fd00:b12f:acab:1312:acab:2::\""
|
||||
"\"firefly.b12f.io. 10800 IN A 10.0.1.2\""
|
||||
"\"firefly.b12f.io. 10800 IN AAAA fd00:acab:1312:acab:2::\""
|
||||
"\"firefly.b12f.io. 10800 IN AAAA fd00:b12f:acab:1312:acab:2::\""
|
||||
"\"firefly-importer.b12f.io. 10800 IN A 10.0.1.2\""
|
||||
"\"firefly-importer.b12f.io. 10800 IN AAAA fd00:acab:1312:acab:2::\""
|
||||
"\"firefly-importer.b12f.io. 10800 IN AAAA fd00:b12f:acab:1312:acab:2::\""
|
||||
"\"paperless.b12f.io. 10800 IN A 10.0.1.2\""
|
||||
"\"paperless.b12f.io. 10800 IN AAAA fd00:acab:1312:acab:2::\""
|
||||
"\"paperless.b12f.io. 10800 IN AAAA fd00:b12f:acab:1312:acab:2::\""
|
||||
"\"invoicing.b12f.io. 10800 IN A 10.0.1.2\""
|
||||
"\"invoicing.b12f.io. 10800 IN AAAA fd00:acab:1312:acab:2::\""
|
||||
"\"invoicing.b12f.io. 10800 IN AAAA fd00:b12f:acab:1312:acab:2::\""
|
||||
|
||||
"\"vpn.b12f.io. 10800 IN A 128.140.109.213\""
|
||||
"\"vpn.b12f.io. 10800 IN AAAA 2a02:908:5b1:e3c0:3077:2::\""
|
||||
|
|
|
@ -42,7 +42,7 @@ in {
|
|||
publicKey = "p6YKNYBlySKfhTN+wbSsKdoNjzko/XSAiTAlCJzP1jA=";
|
||||
allowedIPs = [
|
||||
"10.0.1.0/24"
|
||||
"fd00:b12f:acab:1312:acab::/48"
|
||||
"fd00:b12f:acab:1312::/64"
|
||||
];
|
||||
endpoint = "[2a01:4f8:c2c:b60::]:51899";
|
||||
persistentKeepalive = 25;
|
||||
|
|
|
@ -18,11 +18,6 @@ in {
|
|||
programs.ssh = {
|
||||
enable = true;
|
||||
matchBlocks = {
|
||||
"pie.local" = {
|
||||
hostname = "pie.local";
|
||||
user = "yule";
|
||||
};
|
||||
|
||||
"git.b12f.io" = {
|
||||
hostname = "git.b12f.io";
|
||||
user = "git";
|
||||
|
@ -73,12 +68,17 @@ in {
|
|||
port = 2244;
|
||||
};
|
||||
|
||||
"pie.local" = {
|
||||
hostname = "pie.local";
|
||||
user = "yule";
|
||||
};
|
||||
|
||||
"pie.b12f.io" = {
|
||||
user = "yule";
|
||||
};
|
||||
|
||||
"frikandel-initrd.b12f.io" = {
|
||||
user = "yule";
|
||||
user = "root";
|
||||
port = 2222;
|
||||
};
|
||||
|
||||
|
|
Loading…
Reference in a new issue