summaryrefslogtreecommitdiff
path: root/modules/wg/proxy.nix
blob: ada0a8e95eda710cd82dd2cfafda1c745034ff3f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
{ config, ... }:
{
  oxalab.wg = [
    {
      networkName = "0xa-proxy";
      CIDRs = [
        "10.89.88.0/24"
        "fd31:185d:722f::/48"
      ];

      hosts = {
        "cloud" = {
          address = [
            "10.89.88.1/24"
            "fd31:185d:722f::1/48"
          ];
          publicKey = "XdUqSz0W6aqJET/9wNwoRyR8mgPs2dRWm+ijNwzEyE0=";
          privateKeyFile = config.sops.secrets."wg/0xa-proxy".path;
          endpoint = {
            enable = true;
            endpoint = "188.245.196.27";
            port = 51821;
            publicIface = "enp1s0";
          };
        };
        "auth" = {
          address = [
            "10.89.88.11/24"
            "fd31:185d:722f::11/48"
          ];
          publicKey = "5pW+lt3Xty8IdQ3ndcIXR3B7pl3hV+8M+EgvGmaRhyU=";
          privateKeyFile = config.sops.secrets."wg/0xa-proxy".path;
        };
        "immich" = {
          address = [
            "10.89.88.13/24"
            "fd31:185d:722f::13/48"
          ];
          publicKey = "NXBlfKx4udjI6C7Dcp1Us7lYnE+L0avnMb1VSLxj42s=";
          privateKeyFile = config.sops.secrets."wg/0xa-proxy".path;
        };
        "miniflux" = {
          address = [
            "10.89.88.14/24"
            "fd31:185d:722f::14/48"
          ];
          publicKey = "2Lvjzg8k5EIR0Y5mlsCHOs1cJl1+1SL0QMxkKUmliE0=";
          privateKeyFile = config.sops.secrets."wg/0xa-proxy".path;
        };
        "forgejo" = {
          address = [
            "10.89.88.15/24"
            "fd31:185d:722f::15/48"
          ];
          publicKey = "pXiOmI3aspl2IvdvLXLddxw76QYMRTACNm42nq+L4D0=";
          privateKeyFile = config.sops.secrets."wg/0xa-proxy".path;
        };
        "conduwuit" = {
          address = [
            "10.89.88.16/24"
            "fd31:185d:722f::16/48"
          ];
          publicKey = "dj5/CnTAFe5ELnZ5oWonYc+5VdzDyooTYGb/bqcxf3Y=";
          privateKeyFile = config.sops.secrets."wg/0xa-proxy".path;
        };
        "stream" = {
          address = [
            "10.89.88.17/24"
            "fd31:185d:722f::17/48"
          ];
          publicKey = "RDxbOvd/1FSWqIp5v1++wPBcG1hScAT4mhIlMZdvxU4=";
          privateKeyFile = config.sops.secrets."wg/0xa-proxy".path;
        };
        "cgit" = {
          address = [
            "10.89.88.19/24"
            "fd31:185d:722f::19/48"
          ];
          publicKey = "E9cs2Lq5hsBkz5UoUviJEf22pF0EpX6IYGm9L8D7QDc=";
          privateKeyFile = config.sops.secrets."wg/0xa-proxy".path;
        };
      };
    }
  ];

}