add wg peers

1 files changed, 11 insertions, 1 deletions

diff --git a/modules/router.nix b/modules/router.nix
index aaf36ee..3f997e2 100644
--- a/modules/router.nix
+++ b/modules/router.nix
@@ -324,9 +324,19 @@ in {
     networking.wireguard.interfaces.wg-vpn = {
       socketNamespace = "router";
       interfaceNamespace = "router";
-      ips = [ "${vpnPrefix}::d/128" ];
+      ips = [ "${vpnPrefix}::1/128" ];
       privateKeyFile = config.age.secrets.dragon-wireguard-key.path;
       listenPort = vpnPort;
+      ppers = let mkPeer = host: ip: {
+        ips = [ "${vpn-prefix}::${ip}/128" ];
+        publicKey = (builtins.readFile (../secrets + "/${host}-wireguard-key.pub"));
+        endpoint = null;
+        router = false;
+      } in {
+        firelink = mkPeer "firelink" "2001";
+        pincer = mkPeer "pincer" "2001";
+        trygve = mkPeer "trygve" "2004";
+      };
     };
 
     services.ddclient = {