From d0a5776d5ffe07fa286b1ef0f2b27f422cf301b5 Mon Sep 17 00:00:00 2001 From: Kjetil Orbekk Date: Wed, 4 Aug 2021 17:12:58 -0400 Subject: add wireguard config --- modules/mullvad.nix | 39 --------------------------------------- 1 file changed, 39 deletions(-) delete mode 100644 modules/mullvad.nix (limited to 'modules/mullvad.nix') diff --git a/modules/mullvad.nix b/modules/mullvad.nix deleted file mode 100644 index 436a3b2..0000000 --- a/modules/mullvad.nix +++ /dev/null @@ -1,39 +0,0 @@ -{ config, lib, pkgs, ... }: - -let - cfg = config.orbekk.mullvad; -in -{ - options = { - orbekk.mullvad = { - enable = lib.mkEnableOption "Enable VPN"; - - listenPort = lib.mkOption { - type = lib.types.port; - default = 40421; - description = "wireguard local port"; - }; - }; - }; - - config = lib.mkIf cfg.enable { - orbekk.simple-firewall.allowedUDPPorts = [ cfg.listenPort ]; - - networking.wireguard = { - enable = true; - interfaces.mullvad = { - privateKeyFile = "/opt/secret/wireguard/mullvad.private"; - ips = [ "10.70.90.245/32" "fc00:bbbb:bbbb:bb01::7:5af4/128" ]; - allowedIPsAsRoutes = false; - listenPort = cfg.listenPort; - peers = [ - { - endpoint = "ca10-wireguard.mullvad.net:51820"; - publicKey = "pAVh6WJtyF7ktvavez399L4A615TXOAaUHQgpwJ4EHU="; - allowedIPs = [ "0.0.0.0/0" "::0/0" ]; - } - ]; - }; - }; - }; -} -- cgit v1.2.3