From 0457c44807d6776ffcc83f31a8285f5afc2914e2 Mon Sep 17 00:00:00 2001 From: Grisha Shipunov Date: Fri, 3 Jan 2025 19:06:42 +0100 Subject: fixup toaster network --- hosts/toaster/network/dumpdvb.nix | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 hosts/toaster/network/dumpdvb.nix (limited to 'hosts/toaster/network/dumpdvb.nix') diff --git a/hosts/toaster/network/dumpdvb.nix b/hosts/toaster/network/dumpdvb.nix new file mode 100644 index 0000000..84074bd --- /dev/null +++ b/hosts/toaster/network/dumpdvb.nix @@ -0,0 +1,34 @@ +{ config, ... }: { + systemd.network = { + # Wireguard + # Dump-dvb + netdevs."30-wg-dumpdvb" = { + netdevConfig = { + Kind = "wireguard"; + Name = "wg-dumpdvb"; + Description = "dvb.solutions enterprise network"; + }; + wireguardConfig = { + PrivateKeyFile = config.sops.secrets."wg/dvb".path; + }; + wireguardPeers = [ + { + PublicKey = "WDvCObJ0WgCCZ0ORV2q4sdXblBd8pOPZBmeWr97yphY="; + Endpoint = "academicstrokes.com:51820"; + AllowedIPs = [ "10.13.37.0/24" ]; + PersistentKeepalive = 25; + } + ]; + }; + networks."30-wg-dumpdvb" = { + matchConfig.Name = "wg-dumpdvb"; + networkConfig = { + Address = "10.13.37.3/24"; + IPv6AcceptRA = true; + }; + routes = [ + { Gateway = "10.13.37.1"; Destination = "10.13.37.0/24"; } + ]; + }; + }; +} -- cgit v1.3.1