From a7ca178fd89696e01723db59fb162f760cad0fec Mon Sep 17 00:00:00 2001
From: Grigory Shipunov
Date: Fri, 16 Jun 2023 13:33:20 +0200
Subject: add reverse proxy for factorio

---
 hosts/cirrus/wireguard-server.nix | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

(limited to 'hosts')

diff --git a/hosts/cirrus/wireguard-server.nix b/hosts/cirrus/wireguard-server.nix
index 526e8db..74e6091 100644
--- a/hosts/cirrus/wireguard-server.nix
+++ b/hosts/cirrus/wireguard-server.nix
@@ -5,6 +5,7 @@
       # wireguards
       51820
       51821
+      34197
     ];
     allowedTCPPorts = [
       # port forward ssh to music
@@ -13,10 +14,12 @@
     # port-forward ssh to the music machine
     extraCommands = ''
       iptables -t nat -I PREROUTING -p tcp --dport 2020 -j DNAT --to-destination 10.34.45.101:22
+      iptables -t nat -I PREROUTING -p udp --dport 34197 -j DNAT --to-destination 10.34.45.111:34197
       iptables ! -o lo -t nat -A POSTROUTING -j MASQUERADE
     '';
     extraStopCommands = ''
       iptables -t nat -D PREROUTING -p tcp --dport 2020 -j DNAT --to-destination 10.34.45.101:22 || true
+      iptables -t nat -D PREROUTING -p udp --dport 34197 -j DNAT --to-destination 10.34.45.111:34197 || true
     '';
   };
 
@@ -40,7 +43,6 @@
         {
           # microwave
           wireguardPeerConfig = {
-            # nextcloud down, have to keep things in here: https://www.youtube.com/watch?v=1c6v7j1TUBI
             PublicKey = "0zpfcNrmbsNwwbnDDX4SMl4BVTB0zuhGKixT9TJQoHc=";
             AllowedIPs = [ "10.66.66.10/32" ];
             PersistentKeepalive = 25;
@@ -49,7 +51,6 @@
         {
           # Dishwasher
           wireguardPeerConfig = {
-            # nextcloud down, have to keep things in here: https://www.youtube.com/watch?v=1c6v7j1TUBI
             PublicKey = "AdWUBbyeRkxdP9HUu25PpISoxbgQ8oeCw3BmV93xtAw=";
             AllowedIPs = [ "10.66.66.100/32" ];
             PersistentKeepalive = 25;
@@ -103,6 +104,13 @@
             PersistentKeepalive = 25;
           };
         }
+        {
+          wireguardPeerConfig = {
+            PublicKey = "6rwSThPEfTyYvMVSnHNcNPRntCHEQFyscF2SodI8A34=";
+            AllowedIPs = [ "10.34.45.111/32" ];
+            PersistentKeepalive = 25;
+          };
+        }
       ];
     };
     networks."oxaproxy" = {
-- 
cgit v1.3.1