1 files changed, 56 insertions, 0 deletions
diff --git a/hosts/toaster/network/zw.nix b/hosts/toaster/network/zw.nix
new file mode 100644
index 0000000..af961be
--- /dev/null
+++ b/hosts/toaster/network/zw.nix
@@ -0,0 +1,56 @@
+{ config, ... }: {
+    # zentralwerk
+    systemd.network = {
+      netdevs."10-wg-zentralwerk" = {
+        netdevConfig = {
+          Kind = "wireguard";
+          Name = "wg-zentralwerk";
+          Description = "Tunnel to the best basement in Dresden";
+        };
+        wireguardConfig = {
+          PrivateKeyFile = config.sops.secrets."wg/zw".path;
+          RouteTable = "off";
+        };
+        wireguardPeers = [
+          {
+            PublicKey = "PG2VD0EB+Oi+U5/uVMUdO5MFzn59fAck6hz8GUyLMRo=";
+            Endpoint = "81.201.149.152:1337";
+            AllowedIPs = [ "172.20.72.0/21" "172.22.90.0/24" "172.22.99.0/24" ];
+            PersistentKeepalive = 25;
+          }
+        ];
+      };
+      networks."10-wg-zentralwerk" = {
+        matchConfig.Name = "wg-zentralwerk";
+        networkConfig = {
+          Address = "172.20.76.226/21";
+          IPv6AcceptRA = true;
+          DNS = "172.20.73.8";
+          Domains = [
+            "~hq.c3d2.de"
+            "~serv.zentralwerk.org"
+            "~hq.zentralwerk.org"
+            "~cluster.zentralwerk.org"
+          ];
+        };
+        routes = [
+          {
+            Gateway = "172.20.76.225";
+            Destination = "172.20.72.0/21";
+            Metric = 1023;
+          }
+          {
+            Gateway = "172.20.76.225";
+            Destination = "172.20.90.0/24";
+            Metric = 1023;
+          }
+          {
+            Gateway = "172.20.76.225";
+            Destination = "172.22.99.0/24";
+            Metric = 1023;
+          }
+
+        ];
+      };
+    };
+  }