diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2026-09-24 10:56:18 +0200 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2026-09-24 10:56:18 +0200 |
| commit | 801594dd2168c6d99b34de0bc26ec037aa91ebee (patch) | |
| tree | af9183fd71cc7ed5fd8a01b19f3979ed632640ec /modules/yggdrasil-wg | |
| parent | 7cbc2ab91426b555d01fb90d056119c9677b1a77 (diff) | |
| download | nixos-801594dd2168c6d99b34de0bc26ec037aa91ebee.tar nixos-801594dd2168c6d99b34de0bc26ec037aa91ebee.tar.gz nixos-801594dd2168c6d99b34de0bc26ec037aa91ebee.tar.bz2 nixos-801594dd2168c6d99b34de0bc26ec037aa91ebee.tar.xz nixos-801594dd2168c6d99b34de0bc26ec037aa91ebee.zip | |
...
Diffstat (limited to 'modules/yggdrasil-wg')
| -rw-r--r-- | modules/yggdrasil-wg/default.nix | 23 | ||||
| -rw-r--r-- | modules/yggdrasil-wg/hosts/4/skadhi.priv | 18 | ||||
| -rw-r--r-- | modules/yggdrasil-wg/hosts/4/skadhi.pub | 1 | ||||
| -rw-r--r-- | modules/yggdrasil-wg/hosts/6/skadhi.priv | 18 | ||||
| -rw-r--r-- | modules/yggdrasil-wg/hosts/6/skadhi.pub | 1 |
5 files changed, 61 insertions, 0 deletions
diff --git a/modules/yggdrasil-wg/default.nix b/modules/yggdrasil-wg/default.nix index 8b190651..c17c8f08 100644 --- a/modules/yggdrasil-wg/default.nix +++ b/modules/yggdrasil-wg/default.nix | |||
| @@ -48,33 +48,56 @@ let | |||
| 48 | PersistentKeepalive = 25; | 48 | PersistentKeepalive = 25; |
| 49 | family = "4"; | 49 | family = "4"; |
| 50 | } | 50 | } |
| 51 | { from = "skadhi"; | ||
| 52 | to = "surtr"; | ||
| 53 | endpointHost = "202.61.241.61"; | ||
| 54 | PersistentKeepalive = 25; | ||
| 55 | family = "4"; | ||
| 56 | } | ||
| 57 | { from = "skadhi"; | ||
| 58 | to = "surtr"; | ||
| 59 | endpointHost = "2a03:4000:52:ada::"; | ||
| 60 | PersistentKeepalive = 25; | ||
| 61 | family = "6"; | ||
| 62 | } | ||
| 63 | { from = "skadhi"; | ||
| 64 | to = "vidhar"; | ||
| 65 | endpointHost = "10.141.0.1"; | ||
| 66 | PersistentKeepalive = 25; | ||
| 67 | family = "4"; | ||
| 68 | } | ||
| 51 | ]; | 69 | ]; |
| 52 | wgHostIPs = mapAttrs (_family: wgSubnet: { | 70 | wgHostIPs = mapAttrs (_family: wgSubnet: { |
| 53 | surtr = "${wgSubnet}::/${toString wgHostLength}"; | 71 | surtr = "${wgSubnet}::/${toString wgHostLength}"; |
| 54 | vidhar = "${wgSubnet}:1::/${toString wgHostLength}"; | 72 | vidhar = "${wgSubnet}:1::/${toString wgHostLength}"; |
| 55 | sif = "${wgSubnet}:2::/${toString wgHostLength}"; | 73 | sif = "${wgSubnet}:2::/${toString wgHostLength}"; |
| 74 | skadhi = "${wgSubnet}:3::/${toString wgHostLength}"; | ||
| 56 | }) wgSubnet; | 75 | }) wgSubnet; |
| 57 | greHostMACPrefixes = { | 76 | greHostMACPrefixes = { |
| 58 | "4" = { | 77 | "4" = { |
| 59 | surtr = "02:00:01:00:00"; | 78 | surtr = "02:00:01:00:00"; |
| 60 | vidhar = "02:00:01:00:01"; | 79 | vidhar = "02:00:01:00:01"; |
| 61 | sif = "02:00:01:00:02"; | 80 | sif = "02:00:01:00:02"; |
| 81 | skadhi = "02:00:01:00:03"; | ||
| 62 | }; | 82 | }; |
| 63 | "6" = { | 83 | "6" = { |
| 64 | surtr = "02:00:02:00:00"; | 84 | surtr = "02:00:02:00:00"; |
| 65 | vidhar = "02:00:02:00:01"; | 85 | vidhar = "02:00:02:00:01"; |
| 66 | sif = "02:00:02:00:02"; | 86 | sif = "02:00:02:00:02"; |
| 87 | skadhi = "02:00:02:00:03"; | ||
| 67 | }; | 88 | }; |
| 68 | }; | 89 | }; |
| 69 | batHostMACs = { | 90 | batHostMACs = { |
| 70 | surtr = "02:00:00:00:00:00"; | 91 | surtr = "02:00:00:00:00:00"; |
| 71 | vidhar = "02:00:00:01:00:00"; | 92 | vidhar = "02:00:00:01:00:00"; |
| 72 | sif = "02:00:00:02:00:00"; | 93 | sif = "02:00:00:02:00:00"; |
| 94 | skadhi = "02:00:00:03:00:00"; | ||
| 73 | }; | 95 | }; |
| 74 | batHostIPs = { | 96 | batHostIPs = { |
| 75 | surtr = ["${batSubnet}::/${toString batHostLength}"]; | 97 | surtr = ["${batSubnet}::/${toString batHostLength}"]; |
| 76 | vidhar = ["${batSubnet}:1::/${toString batHostLength}"]; | 98 | vidhar = ["${batSubnet}:1::/${toString batHostLength}"]; |
| 77 | sif = ["${batSubnet}:2::/${toString batHostLength}"]; | 99 | sif = ["${batSubnet}:2::/${toString batHostLength}"]; |
| 100 | skadhi = ["${batSubnet}:3::/${toString batHostLength}"]; | ||
| 78 | }; | 101 | }; |
| 79 | routers = [ "surtr" ]; | 102 | routers = [ "surtr" ]; |
| 80 | 103 | ||
diff --git a/modules/yggdrasil-wg/hosts/4/skadhi.priv b/modules/yggdrasil-wg/hosts/4/skadhi.priv new file mode 100644 index 00000000..dd66633f --- /dev/null +++ b/modules/yggdrasil-wg/hosts/4/skadhi.priv | |||
| @@ -0,0 +1,18 @@ | |||
| 1 | { | ||
| 2 | "data": "ENC[AES256_GCM,data:fXF8DV6vgpbJJWQvjIS3sFZ+yUEPtWwAZQrDLT8jueqDdn/IVaZGlq+DEnT0,iv:FU0ofu31RZlq2qMcMHlzYoRB61g+vwaG2JjPrKUgxYI=,tag:+dLvtiKmYdtk9NCXV8Yn9w==,type:str]", | ||
| 3 | "sops": { | ||
| 4 | "age": [ | ||
| 5 | { | ||
| 6 | "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQR25od0g4MGhLY2d0Y1Fx\nS3RGVE1UbTFEc1Qzakx0VFdDbWNTdnU1MXowCkxNMXJycGlEVFEvV1dtQ3B3WXVX\nRm12ZmZTUTd6WGtvQkNJQzlsTVF1RHcKLS0tIE9tMzIzWFlWNHdINTkrSmcwYVNT\nVEVzSWFjMWJLSmRPRmZlQ1ZVMktLQ28KAUOrlZCuSZwF7QkOSz1dQ4Uj2f8gvjtM\n3c4sXQ3P77Rqluijsxo9KQx7Q0lRGBaRPMY4IrnHNPogd8iOHPeZuA==\n-----END AGE ENCRYPTED FILE-----\n", | ||
| 7 | "recipient": "age1rmmhetcmllq0ahl5qznlr0eya2zdxwl9h6y5wnl97d2wtyx5t99sm2u866" | ||
| 8 | }, | ||
| 9 | { | ||
| 10 | "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArWmlPTWUrZ1QvYVBSckFL\nelZtcGdEMDBHeE5ROVdVdEJvWHpISzN3OVhjCkpSSTg2dDNqZjZYY0RyRlpuTi96\nS1l1dzJPV0NKbEJVdWpkTnZNZXJ0Qk0KLS0tIElBMmxJcmlxekVxRm1VdkgrSkNm\nZXhaMlhNdi9hVlNKaXU5MGVnK2NZWnMKjavFZczePCyYb2X4UsFNOaB5g+g1KZ52\npl+NTzRsUIXqPZnRDcCkGDjlQgLnZ+A22Enhbpj21ThiPV7bTyFh2g==\n-----END AGE ENCRYPTED FILE-----\n", | ||
| 11 | "recipient": "age1u6xegt79rarmyz8qy4pl7jh9lh90vx8fg0frmh4u2mzam7zydq4s4agz4e" | ||
| 12 | } | ||
| 13 | ], | ||
| 14 | "lastmodified": "2026-09-24T04:46:17Z", | ||
| 15 | "mac": "ENC[AES256_GCM,data:cubfKvUaDE6XNb9Y/1dbXpwayRXoZjiM9T3dN+YVeS6/5WX+hMC7We6mdge5VBnZ9CjA3XXNy+ZP1DEaPSg1OsBq1ubnFuVbaRKZlFl1B4I+6e4xpsZdQiyZT3SFZoM/LI1oM6kxD8e1n7KjFWNRx3yqAMaK3z1Ko1AlAmkmDx8=,iv:ME5EYC/MvuFxY7es250VcW0z2x1tCInCPrZnr4mBjrw=,tag:Jfd3uEVibe6Iw/3uNc+UTQ==,type:str]", | ||
| 16 | "version": "3.13.3" | ||
| 17 | } | ||
| 18 | } | ||
diff --git a/modules/yggdrasil-wg/hosts/4/skadhi.pub b/modules/yggdrasil-wg/hosts/4/skadhi.pub new file mode 100644 index 00000000..a722609e --- /dev/null +++ b/modules/yggdrasil-wg/hosts/4/skadhi.pub | |||
| @@ -0,0 +1 @@ | |||
| x5c5441ah63QZRbj+IV711Xv3JZOQYQON8Zo7rzU6i4= | |||
diff --git a/modules/yggdrasil-wg/hosts/6/skadhi.priv b/modules/yggdrasil-wg/hosts/6/skadhi.priv new file mode 100644 index 00000000..848cd299 --- /dev/null +++ b/modules/yggdrasil-wg/hosts/6/skadhi.priv | |||
| @@ -0,0 +1,18 @@ | |||
| 1 | { | ||
| 2 | "data": "ENC[AES256_GCM,data:lOitSuIg4Xjr5xycgaXBWkA79zySQOy+ZPXUxRjbU3F3/YHbcyrKYatVygdf,iv:8QcEXehosL/zUYxbNE284GfQHjz6HzBIyscigtNiDw8=,tag:eRINZKIv4UwprovUq7016Q==,type:str]", | ||
| 3 | "sops": { | ||
| 4 | "age": [ | ||
| 5 | { | ||
| 6 | "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLY2U0S2tUZHpXSjVoTk1m\nSWlXK0UyWm5SMGxBbUtHTFp1U3NadUliemlNCjArMHdJVk5BYzVSK0F5RGdMQU1E\nMEZuUkt3R29sdHZsRnFPaVhlUzVpaWcKLS0tIDFXOEpFOC94NlEzZnZqY2F6VERt\nc3lvZEt2b0tVU3pvMU5VR1dqYUtFbUEKcRVTIkz5bz47rAkihOTJLJPvA0mqabUM\nUr+zZjdrWTKqnWuEcJ93xsCKyo4kC1k/SkaXia65krhi9z4BVe5kgQ==\n-----END AGE ENCRYPTED FILE-----\n", | ||
| 7 | "recipient": "age1rmmhetcmllq0ahl5qznlr0eya2zdxwl9h6y5wnl97d2wtyx5t99sm2u866" | ||
| 8 | }, | ||
| 9 | { | ||
| 10 | "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRWUxYNXNXODAzb2daTC9Y\nSmtHRHUwZmRoaXhpTmpDbXZSMkkwMjI0Q2pnCi92RFgrK2pSTFdIL29wT09lVGZM\nTWxXamlSOVpOdXoxcSttSDNkUDJ1K0UKLS0tIC9rVnNXZWxhd2J3NGd2NkdUOUVO\nbE9ha1RyS3dOczNXa3pjVkh3bm5RS1kK4APdzi4AKkI7z5S2zpFkipkldVzeYO0Q\nGck0KtHhM8ZRTqJ9Q7WID2JwbAV5og3924SAYFbQvYdSd2zGqkD+Aw==\n-----END AGE ENCRYPTED FILE-----\n", | ||
| 11 | "recipient": "age1u6xegt79rarmyz8qy4pl7jh9lh90vx8fg0frmh4u2mzam7zydq4s4agz4e" | ||
| 12 | } | ||
| 13 | ], | ||
| 14 | "lastmodified": "2026-09-24T04:46:30Z", | ||
| 15 | "mac": "ENC[AES256_GCM,data:5mgUxl7FQCgmCWL2SRtf7FOi5z64scb9Qt/rUwPMdenAuTG0ED3NVGOATTVoco7l0MBbs/D7OBKDMMvJ/Odgo0I9srRDyhXdrVbVKMphD1uXAwxPaK2iUeK3xz93Kzvr17UXzd7SwXTReokv/lIcFyDqUvlBXGWxZdYsc/rf4Us=,iv:50ByoxaHrl6qQbKoEEAgUIpYyhVhp47AYnagbH8n5kA=,tag:5KjE/A7EwiG/sSGpkkQBcg==,type:str]", | ||
| 16 | "version": "3.13.3" | ||
| 17 | } | ||
| 18 | } | ||
diff --git a/modules/yggdrasil-wg/hosts/6/skadhi.pub b/modules/yggdrasil-wg/hosts/6/skadhi.pub new file mode 100644 index 00000000..7a51045a --- /dev/null +++ b/modules/yggdrasil-wg/hosts/6/skadhi.pub | |||
| @@ -0,0 +1 @@ | |||
| BtEGTPfLbtQJAAHfG/7jBissxcR/IfIRqeqhZG2dr0k= | |||
