diff options
| author | Grigory Shipunov | 2022-06-18 11:49:27 +0200 |
|---|---|---|
| committer | Grigory Shipunov | 2022-06-18 11:51:27 +0200 |
| commit | 121e2f5004e109c5fc9530d136aae497061b8ef7 (patch) | |
| tree | 6a7f9adba499e626431a402b8356a268b5d2c69b /hosts/dishwasher/oxalab.nix | |
| parent | 16da95bca0c6daecca412c7b883e4cf2aa6397ba (diff) | |
oxalab: init
Diffstat (limited to 'hosts/dishwasher/oxalab.nix')
| -rw-r--r-- | hosts/dishwasher/oxalab.nix | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/hosts/dishwasher/oxalab.nix b/hosts/dishwasher/oxalab.nix new file mode 100644 index 0000000..b6521cf --- /dev/null +++ b/hosts/dishwasher/oxalab.nix @@ -0,0 +1,32 @@ +{ config, ... }: +{ + systemd.network = { + netdevs."oxalab" = { + netdevConfig = { + Kind = "wireguard"; + Name = "oxalab"; + Description = "oxa's enterprise network"; + }; + wireguardConfig = { + PrivateKeyFile = config.sops.secrets."wg/oxalab-seckey".path; + }; + wireguardPeers = [ + { + # cirrus + wireguardPeerConfig = { + PublicKey = "5nCVC21BL+1r70OGwA4Q6Z/gcPLC3+ZF8sTurdn7N0E="; + AllowedIPs = [ "10.66.66.0/24" ]; + Endpoint = [ "95.216.166.21:51820" ]; + PersistentKeepalive = 25; + }; + } + ]; + }; + networks."oxalab" = { + matchConfig.Name = "oxalab"; + networkConfig = { + Address = "10.13.37.100"; + }; + }; + }; +} |
