summaryrefslogtreecommitdiff
path: root/hosts/dishwasher/oxalab.nix
diff options
context:
space:
mode:
authorGrigory Shipunov2022-06-18 11:49:27 +0200
committerGrigory Shipunov2022-06-18 11:51:27 +0200
commit121e2f5004e109c5fc9530d136aae497061b8ef7 (patch)
tree6a7f9adba499e626431a402b8356a268b5d2c69b /hosts/dishwasher/oxalab.nix
parent16da95bca0c6daecca412c7b883e4cf2aa6397ba (diff)
oxalab: init
Diffstat (limited to 'hosts/dishwasher/oxalab.nix')
-rw-r--r--hosts/dishwasher/oxalab.nix32
1 files changed, 32 insertions, 0 deletions
diff --git a/hosts/dishwasher/oxalab.nix b/hosts/dishwasher/oxalab.nix
new file mode 100644
index 0000000..b6521cf
--- /dev/null
+++ b/hosts/dishwasher/oxalab.nix
@@ -0,0 +1,32 @@
+{ config, ... }:
+{
+ systemd.network = {
+ netdevs."oxalab" = {
+ netdevConfig = {
+ Kind = "wireguard";
+ Name = "oxalab";
+ Description = "oxa's enterprise network";
+ };
+ wireguardConfig = {
+ PrivateKeyFile = config.sops.secrets."wg/oxalab-seckey".path;
+ };
+ wireguardPeers = [
+ {
+ # cirrus
+ wireguardPeerConfig = {
+ PublicKey = "5nCVC21BL+1r70OGwA4Q6Z/gcPLC3+ZF8sTurdn7N0E=";
+ AllowedIPs = [ "10.66.66.0/24" ];
+ Endpoint = [ "95.216.166.21:51820" ];
+ PersistentKeepalive = 25;
+ };
+ }
+ ];
+ };
+ networks."oxalab" = {
+ matchConfig.Name = "oxalab";
+ networkConfig = {
+ Address = "10.13.37.100";
+ };
+ };
+ };
+}