From 121e2f5004e109c5fc9530d136aae497061b8ef7 Mon Sep 17 00:00:00 2001 From: Grigory Shipunov Date: Sat, 18 Jun 2022 11:49:27 +0200 Subject: oxalab: init --- hosts/dishwasher/oxalab.nix | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 hosts/dishwasher/oxalab.nix (limited to 'hosts/dishwasher/oxalab.nix') diff --git a/hosts/dishwasher/oxalab.nix b/hosts/dishwasher/oxalab.nix new file mode 100644 index 0000000..b6521cf --- /dev/null +++ b/hosts/dishwasher/oxalab.nix @@ -0,0 +1,32 @@ +{ config, ... }: +{ + systemd.network = { + netdevs."oxalab" = { + netdevConfig = { + Kind = "wireguard"; + Name = "oxalab"; + Description = "oxa's enterprise network"; + }; + wireguardConfig = { + PrivateKeyFile = config.sops.secrets."wg/oxalab-seckey".path; + }; + wireguardPeers = [ + { + # cirrus + wireguardPeerConfig = { + PublicKey = "5nCVC21BL+1r70OGwA4Q6Z/gcPLC3+ZF8sTurdn7N0E="; + AllowedIPs = [ "10.66.66.0/24" ]; + Endpoint = [ "95.216.166.21:51820" ]; + PersistentKeepalive = 25; + }; + } + ]; + }; + networks."oxalab" = { + matchConfig.Name = "oxalab"; + networkConfig = { + Address = "10.13.37.100"; + }; + }; + }; +} -- cgit v1.3.1