diff options
Diffstat (limited to 'hosts/cirrus/wireguard-server.nix')
| -rw-r--r-- | hosts/cirrus/wireguard-server.nix | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/hosts/cirrus/wireguard-server.nix b/hosts/cirrus/wireguard-server.nix index 526e8db..74e6091 100644 --- a/hosts/cirrus/wireguard-server.nix +++ b/hosts/cirrus/wireguard-server.nix @@ -5,6 +5,7 @@ # wireguards 51820 51821 + 34197 ]; allowedTCPPorts = [ # port forward ssh to music @@ -13,10 +14,12 @@ # port-forward ssh to the music machine extraCommands = '' iptables -t nat -I PREROUTING -p tcp --dport 2020 -j DNAT --to-destination 10.34.45.101:22 + iptables -t nat -I PREROUTING -p udp --dport 34197 -j DNAT --to-destination 10.34.45.111:34197 iptables ! -o lo -t nat -A POSTROUTING -j MASQUERADE ''; extraStopCommands = '' iptables -t nat -D PREROUTING -p tcp --dport 2020 -j DNAT --to-destination 10.34.45.101:22 || true + iptables -t nat -D PREROUTING -p udp --dport 34197 -j DNAT --to-destination 10.34.45.111:34197 || true ''; }; @@ -40,7 +43,6 @@ { # microwave wireguardPeerConfig = { - # nextcloud down, have to keep things in here: https://www.youtube.com/watch?v=1c6v7j1TUBI PublicKey = "0zpfcNrmbsNwwbnDDX4SMl4BVTB0zuhGKixT9TJQoHc="; AllowedIPs = [ "10.66.66.10/32" ]; PersistentKeepalive = 25; @@ -49,7 +51,6 @@ { # Dishwasher wireguardPeerConfig = { - # nextcloud down, have to keep things in here: https://www.youtube.com/watch?v=1c6v7j1TUBI PublicKey = "AdWUBbyeRkxdP9HUu25PpISoxbgQ8oeCw3BmV93xtAw="; AllowedIPs = [ "10.66.66.100/32" ]; PersistentKeepalive = 25; @@ -103,6 +104,13 @@ PersistentKeepalive = 25; }; } + { + wireguardPeerConfig = { + PublicKey = "6rwSThPEfTyYvMVSnHNcNPRntCHEQFyscF2SodI8A34="; + AllowedIPs = [ "10.34.45.111/32" ]; + PersistentKeepalive = 25; + }; + } ]; }; networks."oxaproxy" = { |