36 lines
779 B
Nix
36 lines
779 B
Nix
{ lib, config, conf, pkgs, ... }:
|
|
{
|
|
networking = {
|
|
useDHCP = false;
|
|
hostName = "hina";
|
|
firewall =
|
|
{
|
|
interfaces = {
|
|
ens3 = {
|
|
allowedTCPPorts = [ 9898 80 443 ];
|
|
};
|
|
};
|
|
};
|
|
interfaces = {
|
|
ens3 = {
|
|
useDHCP = true;
|
|
};
|
|
};
|
|
|
|
wireguard.interfaces.wg0 = with conf.network.addresses.wireguard.ips; {
|
|
ips = [ hina ];
|
|
listenPort = 17840;
|
|
privateKeyFile = "/var/secrets/wg.key";
|
|
peers = [
|
|
{
|
|
#Oracle VM1
|
|
publicKey = "z0Y2VNEWcyVQVSqRHiwmiJ5/0MgSPM+HZfEcwIccSxM=";
|
|
allowedIPs = [ remilia ];
|
|
endpoint = "${conf.network.addresses.domain.natto}:17840";
|
|
persistentKeepalive = 25;
|
|
}
|
|
];
|
|
};
|
|
};
|
|
}
|