From 9c949ce58187c1fe9ca91ae4aac1901e74df8bc7 Mon Sep 17 00:00:00 2001
From: makefu <github@syntax-fehler.de>
Date: Fri, 23 Sep 2022 23:45:15 +0200
Subject: ma wireguard: add thierry wg setup

---
 makefu/2configs/wireguard/thierry.nix | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 makefu/2configs/wireguard/thierry.nix

(limited to 'makefu/2configs/wireguard')

diff --git a/makefu/2configs/wireguard/thierry.nix b/makefu/2configs/wireguard/thierry.nix
new file mode 100644
index 000000000..f1dfef192
--- /dev/null
+++ b/makefu/2configs/wireguard/thierry.nix
@@ -0,0 +1,21 @@
+{ lib, ... }:
+{
+  networking.wireguard.interfaces.thierry-wg = {
+    ips = [ "172.27.66.10/24" ]; # TODO: not dnyamic
+    privateKeyFile = (toString <secrets>) + "/wg-thierry.key";
+    allowedIPsAsRoutes = true;
+    # explicit route via eth0 to gum
+    peers = [
+    {
+      endpoint = "thierryhome.duckdns.org:51820";
+      allowedIPs = [ "172.27.66.0/24" ];
+      publicKey = "filYuG/xbb2YW8WT0xT26rzeZ/ZiM6NLnbxbsCR9rS0=";
+      persistentKeepalive = 25;
+    }
+    #{
+    #  allowedIPs = [ "172.27.66.3/32" ];
+    #  publicKey = "cDIf14LH4qleXNo889lS2ATIqDx9r//JNCkhHlHgc1Q=";
+    #}
+  ];
+  };
+}
-- 
cgit v1.2.3