22 lines
452 B
Nix
22 lines
452 B
Nix
|
{ config, ... }:
|
||
|
|
|
||
|
|
let
|
||
|
|
serverData = import ../../../tatos/data.secret.nix;
|
||
|
|
in
|
||
|
|
{
|
||
|
|
age.secrets.wireguard-home-private = {
|
||
|
|
file = ./wireguard-home-private.age;
|
||
|
|
mode = "0400";
|
||
|
|
};
|
||
|
|
|
||
|
|
local.services.vpn.wireguard = {
|
||
|
|
enable = true;
|
||
|
|
ip = "10.20.30.3/24";
|
||
|
|
privateKeyFile = config.age.secrets.wireguard-home-private.path;
|
||
|
|
server = {
|
||
|
|
inherit (serverData) addr;
|
||
|
|
inherit (serverData.wireguard) port publicKey;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|