config/vpn-server.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

{ config, lib, pkgs, ... }:
let
  port = (import ../data/aliases.nix).services.wireguard.port;
in
{
  networking.wireguard = {
    interfaces = {
      wg0 = {
        ips = [ "10.35.190.1/23" ];
	privateKeyFile = "/opt/secret/wireguard/wg0.key";
	listenPort = port;
	peers = [
	  {
	    publicKey = "ULWhaOsAaTu4cu84v3PM4DL7arxc/WNnzI/ic2k1KBU=";
	    allowedIPs = ["0.0.0.0/0" "::/0"];
	  }
	];
      };
    };
  };
}