sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(wireguard): qr generation finished

Browse source
This commit is contained in:
oddlama 2023-04-15 16:29:37 +02:00
parent d5f2880457
commit 1630e37afd
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
5 changed files with 47 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

19
modules/wireguard.nix
View file

@ -93,17 +93,19 @@
if wgCfg.server.enable
then
# Always include all other server nodes.
map (serverNode: {
map (serverNode: let
snCfg = wgCfgOf serverNode;
in {
wireguardPeerConfig = {
PublicKey = builtins.readFile (peerPublicKeyPath serverNode);
PresharedKeyFile = config.rekey.secrets.${peerPresharedKeySecret nodeName serverNode}.path;
# The allowed ips of a server node are it's own addreses,
# plus each external peer's addresses,
# plus each client's addresses that is connected via this node.
# plus each client's addresses that is connected via that node.
AllowedIPs =
(wgCfgOf serverNode).addresses
++ attrValues (wgCfgOf serverNode).server.externalPeers
++ map (n: (wgCfgOf n).addresses) ourClientNodes;
snCfg.addresses
++ attrValues snCfg.server.externalPeers; # TODO ++ map (n: (wgCfgOf n).addresses) snCfg.ourClientNodes;
Endpoint = "${snCfg.server.host}:${toString snCfg.server.port}";
};
}) (filterSelf associatedServerNodes)
# All our external peers
@ -155,10 +157,15 @@ in {
server = {
enable = mkEnableOption (mdDoc "wireguard server");
host = mkOption {
type = types.str;
description = mdDoc "The hostname or ip address which other peers can use to reach this host.";
};
port = mkOption {
default = 51820;
type = types.port;
description = mdDoc "The port to listen on, if {option}`listen` is `true`.";
description = mdDoc "The port to listen on.";
};
openFirewall = mkOption {