summaryrefslogtreecommitdiff
path: root/microvms/music/oxaproxy.nix
diff options
context:
space:
mode:
Diffstat (limited to 'microvms/music/oxaproxy.nix')
-rw-r--r--microvms/music/oxaproxy.nix68
1 files changed, 0 insertions, 68 deletions
diff --git a/microvms/music/oxaproxy.nix b/microvms/music/oxaproxy.nix
deleted file mode 100644
index 737d413..0000000
--- a/microvms/music/oxaproxy.nix
+++ /dev/null
@@ -1,68 +0,0 @@
-{ config, ... }: {
-
- networking.wireguard.enable = true;
- networking.useNetworkd = true;
-
- #oxaproxy secret
- sops.defaultSopsFile = ../../secrets/music/secrets.yaml;
- sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
-
- sops.secrets."wg/oxaproxy-seckey" = {
- owner = config.users.users.systemd-network.name;
- };
-
- systemd.network = {
- enable = true;
- netdevs."10-oxaproxy" = {
- netdevConfig = {
- Kind = "wireguard";
- Name = "oxaproxy";
- Description = "oxa's enterprise reverse-proxy network";
- };
- wireguardConfig = {
- PrivateKeyFile = config.sops.secrets."wg/oxaproxy-seckey".path;
- #own pubkey: vQNkp51S9qLsu97dLPj0/EqFwvVtRFZpMHufgKhxum0=
- };
- wireguardPeers = [
- {
- # cirrus
- wireguardPeerConfig = {
- PublicKey = "0KMtL2fQOrrCH6c2a2l4FKiM73G86sUuyaNj4FarzVM=";
- AllowedIPs = [ "10.34.45.0/24" ];
- Endpoint = [ "95.216.166.21:51821" ];
- PersistentKeepalive = 25;
- };
- }
- ];
- };
- networks."10-oxaproxy" = {
- matchConfig.Name = "oxaproxy";
- networkConfig = {
- Address = "10.34.45.101/24";
- };
- };
-
- networks."111-host" = {
- matchConfig.MACAddress = "02:00:00:00:00:01";
- networkConfig = {
- Address = "10.99.99.101/24";
- };
- routes = [
- {
- routeConfig = {
- Gateway = "10.99.99.1";
- Destination = "0.0.0.0/0";
- Metric = 1024;
- };
- }
- {
- routeConfig = {
- Gateway = "10.99.99.1";
- Destination = "10.99.99.0/24";
- Metric = 1024;
- };
- }
- ];
- };
- };
-}