sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: remove generate-wireguard-keys in favor of agenix-rekey generators

Browse source
This commit is contained in:
oddlama 2023-06-09 23:21:18 +02:00
parent dec790c589
commit cfb7c88862
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
7 changed files with 62 additions and 163 deletions
Download patch file Download diff file Expand all files Collapse all files

12
modules/wireguard.nix
View file

@ -158,7 +158,7 @@
${peerPresharedKeySecret nodeName other} = {
rekeyFile = peerPresharedKeyPath nodeName other;
owner = "systemd-network";
# TODO gen func
generator.script = {pkgs, ...}: "${pkgs.wireguard-tools}/bin/wg genpsk";
};
})
neededPeers)
@ -166,7 +166,15 @@
${peerPrivateKeySecret nodeName} = {
rekeyFile = peerPrivateKeyPath nodeName;
owner = "systemd-network";
# TODO gen func
generator.script = {
pkgs,
file,
...
}: ''
${pkgs.wireguard-tools}/bin/wg genkey \
| tee /dev/stdout \
| ${pkgs.wireguard-tools}/bin/wg pubkey > ${lib.escapeShellArg (lib.removeSuffix ".age" file + ".pub")}
'';
};
};