diff options
| -rw-r--r-- | data/dns/db.orbekk.shared.zone | 4 | ||||
| -rw-r--r-- | machines/tiny1.nix | 1 | ||||
| -rw-r--r-- | modules/vpn.nix | 2 |
3 files changed, 4 insertions, 3 deletions
diff --git a/data/dns/db.orbekk.shared.zone b/data/dns/db.orbekk.shared.zone index caf3334..f9811de 100644 --- a/data/dns/db.orbekk.shared.zone +++ b/data/dns/db.orbekk.shared.zone @@ -1,14 +1,12 @@ $TTL 600 @ IN SOA ns1.he.net. root.orbekk.com. ( $serial; serial - 605; refresh + 606; refresh 900; retry 2419200; expire 3600; ) - IN NS kakespade.trygveandre.net. - IN NS kremkake.trygveandre.net. IN NS ns1.he.net. IN NS ns2.he.net. IN NS ns3.he.net. diff --git a/machines/tiny1.nix b/machines/tiny1.nix index 66a2c2a..1ca2837 100644 --- a/machines/tiny1.nix +++ b/machines/tiny1.nix @@ -5,6 +5,7 @@ orbekk.simple-firewall.enable = true; orbekk.simple-firewall.allowedTCPPorts = [ 22 ]; + orbekk.vpn.enable = true; nix.gc.automatic = true; nix.gc.options = "--delete-older-than 14d"; diff --git a/modules/vpn.nix b/modules/vpn.nix index 4d5aaaf..f232e14 100644 --- a/modules/vpn.nix +++ b/modules/vpn.nix @@ -58,6 +58,8 @@ in "${config.networking.hostName}-wireguard-key".file = ./. + "/../secrets/${config.networking.hostName}-wireguard-key.age"; }; + networking.networkmanager.unmanaged = [ "vpn" ]; + networking.wireguard = { enable = true; interfaces.vpn = { |