diff options
Diffstat (limited to 'modules')
| -rw-r--r-- | modules/wireguard.nix | 52 |
1 files changed, 29 insertions, 23 deletions
diff --git a/modules/wireguard.nix b/modules/wireguard.nix index 8df146d..3138a5f 100644 --- a/modules/wireguard.nix +++ b/modules/wireguard.nix @@ -6,31 +6,37 @@ }: { - # WireGuard — not started on boot, use `wg-quick up wg0` / `wg-quick down wg0` - # Private key must be placed at /etc/wireguard/wg0.key (mode 600, owned by root) - networking.wg-quick.interfaces.wg0 = { - autostart = false; - address = [ "10.67.40.2/32" ]; - privateKeyFile = "/etc/wireguard/wg0.key"; - peers = [ - { - publicKey = "wg37lctIxY4qbcyjVDrEI4mahH2Bhgv+73djEjJSyww="; - endpoint = "vpn.soltermann.xyz:51820"; - allowedIPs = [ "10.67.40.0/24" ]; - persistentKeepalive = 25; - } - ]; + options.custom.wireguardAddress = lib.mkOption { + type = lib.types.str; }; - programs.bash.shellAliases = { - vpn-up = "sudo systemctl start wg-quick-wg0"; - vpn-down = "sudo systemctl stop wg-quick-wg0"; - }; + config = { + # WireGuard — not started on boot, use `wg-quick up wg0` / `wg-quick down wg0` + # Private key must be placed at /etc/wireguard/wg0.key (mode 600, owned by root) + networking.wg-quick.interfaces.wg0 = { + autostart = false; + address = [ config.custom.wireguardAddress ]; + privateKeyFile = "/etc/wireguard/wg0.key"; + peers = [ + { + publicKey = "wg37lctIxY4qbcyjVDrEI4mahH2Bhgv+73djEjJSyww="; + endpoint = "vpn.soltermann.xyz:51820"; + allowedIPs = [ "10.67.40.0/24" ]; + persistentKeepalive = 25; + } + ]; + }; - programs.fish.shellAliases = { - vpn-up = "sudo systemctl start wg-quick-wg0"; - vpn-down = "sudo systemctl stop wg-quick-wg0"; - }; + programs.bash.shellAliases = { + vpn-up = "sudo systemctl start wg-quick-wg0"; + vpn-down = "sudo systemctl stop wg-quick-wg0"; + }; - home-manager.users.christian.custom.xmobarVpn = true; + programs.fish.shellAliases = { + vpn-up = "sudo systemctl start wg-quick-wg0"; + vpn-down = "sudo systemctl stop wg-quick-wg0"; + }; + + home-manager.users.christian.custom.xmobarVpn = true; + }; } |