From 0457c44807d6776ffcc83f31a8285f5afc2914e2 Mon Sep 17 00:00:00 2001
From: Grisha Shipunov
Date: Fri, 3 Jan 2025 19:06:42 +0100
Subject: fixup toaster network

---
 hosts/toaster/network/zw.nix | 56 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 56 insertions(+)
 create mode 100644 hosts/toaster/network/zw.nix

(limited to 'hosts/toaster/network/zw.nix')

diff --git a/hosts/toaster/network/zw.nix b/hosts/toaster/network/zw.nix
new file mode 100644
index 0000000..af961be
--- /dev/null
+++ b/hosts/toaster/network/zw.nix
@@ -0,0 +1,56 @@
+{ config, ... }: {
+    # zentralwerk
+    systemd.network = {
+      netdevs."10-wg-zentralwerk" = {
+        netdevConfig = {
+          Kind = "wireguard";
+          Name = "wg-zentralwerk";
+          Description = "Tunnel to the best basement in Dresden";
+        };
+        wireguardConfig = {
+          PrivateKeyFile = config.sops.secrets."wg/zw".path;
+          RouteTable = "off";
+        };
+        wireguardPeers = [
+          {
+            PublicKey = "PG2VD0EB+Oi+U5/uVMUdO5MFzn59fAck6hz8GUyLMRo=";
+            Endpoint = "81.201.149.152:1337";
+            AllowedIPs = [ "172.20.72.0/21" "172.22.90.0/24" "172.22.99.0/24" ];
+            PersistentKeepalive = 25;
+          }
+        ];
+      };
+      networks."10-wg-zentralwerk" = {
+        matchConfig.Name = "wg-zentralwerk";
+        networkConfig = {
+          Address = "172.20.76.226/21";
+          IPv6AcceptRA = true;
+          DNS = "172.20.73.8";
+          Domains = [
+            "~hq.c3d2.de"
+            "~serv.zentralwerk.org"
+            "~hq.zentralwerk.org"
+            "~cluster.zentralwerk.org"
+          ];
+        };
+        routes = [
+          {
+            Gateway = "172.20.76.225";
+            Destination = "172.20.72.0/21";
+            Metric = 1023;
+          }
+          {
+            Gateway = "172.20.76.225";
+            Destination = "172.20.90.0/24";
+            Metric = 1023;
+          }
+          {
+            Gateway = "172.20.76.225";
+            Destination = "172.22.99.0/24";
+            Metric = 1023;
+          }
+
+        ];
+      };
+    };
+  }
-- 
cgit v1.3.1