From 0575849fb626b2da0c09a45d18877bf74950b15f Mon Sep 17 00:00:00 2001
From: Dmitriy Pleshevskiy <dmitriy@pleshevski.ru>
Date: Mon, 20 Mar 2023 23:32:29 +0300
Subject: [PATCH] canigou: cosmetic changes

---
 nixos/hosts/canigou/data.secret.nix        | Bin 53 -> 78 bytes
 nixos/hosts/canigou/services/wireguard.nix |   7 ++++---
 nixos/modules/wireguard-client.nix         |  15 +++++++--------
 3 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/nixos/hosts/canigou/data.secret.nix b/nixos/hosts/canigou/data.secret.nix
index 468c5f4cfb46a548cd74f87f27554e6ecfe540f0..5c95ed5eee3d9201a398ac85e3a1b6288313bca1 100644
GIT binary patch
literal 78
zcmV-U0I~l7M@dveQdv+`03V=7Pm7Y_3$U5ifc30AfZiXTKkzSs@oyVuJDCl|FYzK^
k!T&aPA3FS5h(UqIVdw*E1sQhXmb*Ek?T1<Oe=X~H12;b-$N&HU

literal 53
zcmV-50LuRWM@dveQdv+`0Bmh<#f&1*hNfi-m9m4hH_aA%Oc+T}{F)zO^dM;z;_WNo
LJ*nvyy7FT+Ij0v_

diff --git a/nixos/hosts/canigou/services/wireguard.nix b/nixos/hosts/canigou/services/wireguard.nix
index 0b6dfcf..10b0add 100644
--- a/nixos/hosts/canigou/services/wireguard.nix
+++ b/nixos/hosts/canigou/services/wireguard.nix
@@ -1,7 +1,8 @@
 { config, pkgs, ... }:
 
 let
-  port = 51820;
+  canigouData = import ../data.secret.nix;
+  port = canigouData.wireguardPort;
 in
 {
   # enable NAT
@@ -45,13 +46,13 @@ in
           publicKey = "Gg+p7tysAhu2X841weBiQrqoKXh6kvcmDiCY62rLwQg=";
           # List of IPs assigned to this peer within the tunnel subnet. Used to configure routing.
           allowedIPs = [ "10.100.0.2/32" ];
-          persistentKeepalive = 25;
+          persistentKeepalive = 15;
         }
         {
           # Asus
           publicKey = "mzVH0N3q7UE/XjMwgRks+D8KFuIj91VkOK2ytgjsnkw=";
           allowedIPs = [ "10.100.0.3/32" ];
-          persistentKeepalive = 25;
+          persistentKeepalive = 15;
         }
       ];
     };
diff --git a/nixos/modules/wireguard-client.nix b/nixos/modules/wireguard-client.nix
index afdb0af..c8bb44c 100644
--- a/nixos/modules/wireguard-client.nix
+++ b/nixos/modules/wireguard-client.nix
@@ -3,9 +3,10 @@
 let
   cfg = config.local.wireguard;
 
-  port = 51820;
+  canigouData = import ../hosts/canigou/data.secret.nix;
 
-  serverAddr = (import ../hosts/canigou/data.secret.nix).addr;
+  serverAddr = canigouData.addr;
+  serverPort = canigouData.wireguardPort;
 
   # Run `ip route` to show gateway
   defaultGateway = "192.168.0.1";
@@ -25,7 +26,7 @@ in
 
   config = lib.mkIf cfg.enable {
     networking.firewall = {
-      allowedUDPPorts = [ port ]; # Clients and peers can use the same port, see listenport
+      allowedUDPPorts = [ serverPort ]; # Clients and peers can use the same port, see listenport
     };
     # Enable WireGuard
     networking.wireguard.interfaces = {
@@ -33,7 +34,7 @@ in
       wg0 = {
         # Determines the IP address and subnet of the client's end of the tunnel interface.
         ips = [ cfg.ip ];
-        listenPort = port; # to match firewall allowedUDPPorts (without this wg uses random port numbers)
+        listenPort = serverPort; # to match firewall allowedUDPPorts (without this wg uses random port numbers)
 
         # Path to the private key file.
         privateKeyFile = cfg.privateKeyFile;
@@ -56,12 +57,10 @@ in
             # allowedIPs = [ "192.168.0.0/24" ];
 
             # Set this to the server IP and port.
-            endpoint = "${serverAddr}:${toString port}";
+            endpoint = "${serverAddr}:${toString serverPort}";
 
             # Send keepalives every 25 seconds. Important to keep NAT tables alive.
-            persistentKeepalive = 25;
-
-            dynamicEndpointRefreshRestartSeconds = 5;
+            persistentKeepalive = 15;
           }
         ];
       };