diff options
Diffstat (limited to 'hosts/surtr')
-rw-r--r-- | hosts/surtr/bifrost/default.nix | 10 | ||||
-rw-r--r-- | hosts/surtr/default.nix | 1 | ||||
-rw-r--r-- | hosts/surtr/vpn/default.nix | 30 |
3 files changed, 13 insertions, 28 deletions
diff --git a/hosts/surtr/bifrost/default.nix b/hosts/surtr/bifrost/default.nix index 20cd5892..fbfde757 100644 --- a/hosts/surtr/bifrost/default.nix +++ b/hosts/surtr/bifrost/default.nix | |||
@@ -18,10 +18,8 @@ in { | |||
18 | ListenPort = 51822; | 18 | ListenPort = 51822; |
19 | }; | 19 | }; |
20 | wireguardPeers = [ | 20 | wireguardPeers = [ |
21 | { wireguardPeerConfig = { | 21 | { AllowedIPs = [ "2a03:4000:52:ada:4:1::/96" ]; |
22 | AllowedIPs = [ "2a03:4000:52:ada:4:1::/96" ]; | 22 | PublicKey = trim (readFile ../../vidhar/network/bifrost/vidhar.pub); |
23 | PublicKey = trim (readFile ../../vidhar/network/bifrost/vidhar.pub); | ||
24 | }; | ||
25 | } | 23 | } |
26 | ]; | 24 | ]; |
27 | }; | 25 | }; |
@@ -34,9 +32,7 @@ in { | |||
34 | }; | 32 | }; |
35 | address = ["2a03:4000:52:ada:4::/96"]; | 33 | address = ["2a03:4000:52:ada:4::/96"]; |
36 | routes = [ | 34 | routes = [ |
37 | { routeConfig = { | 35 | { Destination = "2a03:4000:52:ada:4::/80"; |
38 | Destination = "2a03:4000:52:ada:4::/80"; | ||
39 | }; | ||
40 | } | 36 | } |
41 | ]; | 37 | ]; |
42 | linkConfig = { | 38 | linkConfig = { |
diff --git a/hosts/surtr/default.nix b/hosts/surtr/default.nix index e6ca0c64..ceb035cb 100644 --- a/hosts/surtr/default.nix +++ b/hosts/surtr/default.nix | |||
@@ -165,6 +165,7 @@ with lib; | |||
165 | algorithm = "zstd"; | 165 | algorithm = "zstd"; |
166 | }; | 166 | }; |
167 | 167 | ||
168 | systemd.sysusers.enable = false; | ||
168 | system.stateVersion = "20.09"; | 169 | system.stateVersion = "20.09"; |
169 | }; | 170 | }; |
170 | } | 171 | } |
diff --git a/hosts/surtr/vpn/default.nix b/hosts/surtr/vpn/default.nix index 74a9fb22..61a9d544 100644 --- a/hosts/surtr/vpn/default.nix +++ b/hosts/surtr/vpn/default.nix | |||
@@ -63,10 +63,8 @@ in { | |||
63 | ListenPort = 51820; | 63 | ListenPort = 51820; |
64 | }; | 64 | }; |
65 | wireguardPeers = imap1 (i: { name, ip ? i }: { | 65 | wireguardPeers = imap1 (i: { name, ip ? i }: { |
66 | wireguardPeerConfig = { | 66 | AllowedIPs = ["${prefix6}:${toString ip}::/96" "${prefix4}.${toString ip}/32"]; |
67 | AllowedIPs = ["${prefix6}:${toString ip}::/96" "${prefix4}.${toString ip}/32"]; | 67 | PublicKey = trim (readFile (./. + "/${name}.pub")); |
68 | PublicKey = trim (readFile (./. + "/${name}.pub")); | ||
69 | }; | ||
70 | }) [ { name = "geri"; } { name = "sif"; } ]; | 68 | }) [ { name = "geri"; } { name = "sif"; } ]; |
71 | }; | 69 | }; |
72 | }; | 70 | }; |
@@ -86,19 +84,13 @@ in { | |||
86 | MulticastDNS = false; | 84 | MulticastDNS = false; |
87 | }; | 85 | }; |
88 | routes = [ | 86 | routes = [ |
89 | { routeConfig = { | 87 | { Destination = "202.61.240.1"; |
90 | Destination = "202.61.240.1"; | ||
91 | }; | ||
92 | } | 88 | } |
93 | { routeConfig = { | 89 | { Destination = "0.0.0.0/0"; |
94 | Destination = "0.0.0.0/0"; | 90 | Gateway = "202.61.240.1"; |
95 | Gateway = "202.61.240.1"; | ||
96 | }; | ||
97 | } | 91 | } |
98 | { routeConfig = { | 92 | { Destination = "::/0"; |
99 | Destination = "::/0"; | 93 | Gateway = "fe80::1"; |
100 | Gateway = "fe80::1"; | ||
101 | }; | ||
102 | } | 94 | } |
103 | ]; | 95 | ]; |
104 | extraConfig = '' | 96 | extraConfig = '' |
@@ -114,13 +106,9 @@ in { | |||
114 | }; | 106 | }; |
115 | address = ["${prefix6}::/96" "${prefix4}.0/32"]; | 107 | address = ["${prefix6}::/96" "${prefix4}.0/32"]; |
116 | routes = [ | 108 | routes = [ |
117 | { routeConfig = { | 109 | { Destination = "${prefix6}::/80"; |
118 | Destination = "${prefix6}::/80"; | ||
119 | }; | ||
120 | } | 110 | } |
121 | { routeConfig = { | 111 | { Destination = "${prefix4}.0/24"; |
122 | Destination = "${prefix4}.0/24"; | ||
123 | }; | ||
124 | } | 112 | } |
125 | ]; | 113 | ]; |
126 | linkConfig = { | 114 | linkConfig = { |