diff options
| author | Grisha Shipunov | 2025-01-03 19:06:42 +0100 |
|---|---|---|
| committer | Grisha Shipunov | 2025-01-03 19:06:42 +0100 |
| commit | 0457c44807d6776ffcc83f31a8285f5afc2914e2 (patch) | |
| tree | b76a9be6c46bb745636d4adc3f78ac9e051e2cb7 /hosts/toaster/network/dumpdvb.nix | |
| parent | a31fff4a8ee01555b8d24af5816b436998b74200 (diff) | |
fixup toaster network
Diffstat (limited to 'hosts/toaster/network/dumpdvb.nix')
| -rw-r--r-- | hosts/toaster/network/dumpdvb.nix | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/hosts/toaster/network/dumpdvb.nix b/hosts/toaster/network/dumpdvb.nix new file mode 100644 index 0000000..84074bd --- /dev/null +++ b/hosts/toaster/network/dumpdvb.nix @@ -0,0 +1,34 @@ +{ config, ... }: { + systemd.network = { + # Wireguard + # Dump-dvb + netdevs."30-wg-dumpdvb" = { + netdevConfig = { + Kind = "wireguard"; + Name = "wg-dumpdvb"; + Description = "dvb.solutions enterprise network"; + }; + wireguardConfig = { + PrivateKeyFile = config.sops.secrets."wg/dvb".path; + }; + wireguardPeers = [ + { + PublicKey = "WDvCObJ0WgCCZ0ORV2q4sdXblBd8pOPZBmeWr97yphY="; + Endpoint = "academicstrokes.com:51820"; + AllowedIPs = [ "10.13.37.0/24" ]; + PersistentKeepalive = 25; + } + ]; + }; + networks."30-wg-dumpdvb" = { + matchConfig.Name = "wg-dumpdvb"; + networkConfig = { + Address = "10.13.37.3/24"; + IPv6AcceptRA = true; + }; + routes = [ + { Gateway = "10.13.37.1"; Destination = "10.13.37.0/24"; } + ]; + }; + }; +} |
