sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: finish migration to new globals system for wireguard

Browse source
This commit is contained in:
oddlama 2025-09-13 23:23:28 +02:00
parent b885d1062b
commit a1623fb97c
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
29 changed files with 204 additions and 214 deletions
Download patch file Download diff file Expand all files Collapse all files

16
hosts/sentinel/default.nix
View file

@ -22,13 +22,15 @@
nixpkgs.hostPlatform = "x86_64-linux";
boot.mode = "bios";
wireguard.proxy-sentinel.firewallRuleForAll.allowedTCPPorts = [
80
443
];
wireguard.proxy-sentinel.firewallRuleForAll.allowedUDPPorts = [
443
];
globals.wireguard.proxy-sentinel.hosts.${config.node.name}.firewallRuleForAll = {
allowedTCPPorts = [
80
443
];
allowedUDPPorts = [
443
];
};
users.groups.acme.members = [ "nginx" ];
services.nginx.enable = true;

4
hosts/sentinel/net.nix
View file

@ -55,9 +55,7 @@ in
globals.wireguard.proxy-sentinel = {
host = config.networking.fqdn;
port = 51443;
cidrv4 = "10.43.0.0/24";
cidrv6 = "fd00:43::/120";
openFirewall = true;
hosts.${config.node.name}.server = true;
};
}