summaryrefslogtreecommitdiff
path: root/hosts/toaster/network/mullvad.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/toaster/network/mullvad.nix')
-rw-r--r--hosts/toaster/network/mullvad.nix98
1 files changed, 0 insertions, 98 deletions
diff --git a/hosts/toaster/network/mullvad.nix b/hosts/toaster/network/mullvad.nix
deleted file mode 100644
index 54fec8d..0000000
--- a/hosts/toaster/network/mullvad.nix
+++ /dev/null
@@ -1,98 +0,0 @@
-{
- config,
- ...
-}:
-{
- systemd.network =
- let
- pubkey = "xpZ3ZDEukbqKQvdHwaqKMUhsYhcYD3uLPUh1ACsVr1s=";
- endpoint = "185.65.134.86";
- port = "51820";
- addr = [
- "10.74.16.48/32"
- "fc00:bbbb:bbbb:bb01::b:102f/128"
- ];
- in
- {
- netdevs."10-wg-mullvad" = {
- netdevConfig = {
- Kind = "wireguard";
- Name = "wg-mullvad";
- };
- wireguardConfig = {
- PrivateKeyFile = config.sops.secrets."wg/mullvad".path;
- FirewallMark = 34952; # 0x8888
- RouteTable = "off";
- };
- wireguardPeers = [
- {
- PublicKey = pubkey;
- Endpoint = "${endpoint}:${port}";
- AllowedIPs = [
- "0.0.0.0/0"
- "::0/0"
- ];
- }
- ];
- };
- networks."10-wg-mullvad" = {
- matchConfig.Name = "wg-mullvad";
- address = addr;
- networkConfig = {
- DNS = "10.64.0.1";
- DNSDefaultRoute = true;
- Domains = [ "~." ];
- };
- routes =
- map
- (gate: {
- Gateway = gate;
- Table = 1000;
- })
- [
- "0.0.0.0"
- "::"
- ];
-
- routingPolicyRules =
- [
- {
- Family = "both";
- FirewallMark = 34952; # 0x8888
- InvertRule = true;
- Table = "1000";
- Priority = 100;
- }
- {
- Family = "both";
- SuppressPrefixLength = 0;
- Table = "main";
- Priority = 90;
- }
- ]
- ++ map
- (net: {
- # only route global addresses over VPN
- Priority = 80;
- To = net;
- })
- [
- # Mullvad endpoint
- "${endpoint}/32"
- # zw endpoint
- "81.201.149.152/32"
- # oxalab/oxa endpoint
- "188.245.196.27/32"
- # "10.0.0.0/8"
- "10.13.37.0/24"
- # 0xa-mgmt
- "10.89.87.0/24"
- # "172.16.0.0/12"
- "172.16.0.0/12"
- # "182.168.0.0/16"
- "182.168.0.0/16"
- # "fc00::/7"
- ];
- };
- };
-}