summaryrefslogtreecommitdiff
path: root/hosts/surtr
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/surtr')
-rw-r--r--hosts/surtr/bifrost/default.nix10
-rw-r--r--hosts/surtr/default.nix1
-rw-r--r--hosts/surtr/vpn/default.nix30
3 files changed, 13 insertions, 28 deletions
diff --git a/hosts/surtr/bifrost/default.nix b/hosts/surtr/bifrost/default.nix
index 20cd5892..fbfde757 100644
--- a/hosts/surtr/bifrost/default.nix
+++ b/hosts/surtr/bifrost/default.nix
@@ -18,10 +18,8 @@ in {
18 ListenPort = 51822; 18 ListenPort = 51822;
19 }; 19 };
20 wireguardPeers = [ 20 wireguardPeers = [
21 { wireguardPeerConfig = { 21 { AllowedIPs = [ "2a03:4000:52:ada:4:1::/96" ];
22 AllowedIPs = [ "2a03:4000:52:ada:4:1::/96" ]; 22 PublicKey = trim (readFile ../../vidhar/network/bifrost/vidhar.pub);
23 PublicKey = trim (readFile ../../vidhar/network/bifrost/vidhar.pub);
24 };
25 } 23 }
26 ]; 24 ];
27 }; 25 };
@@ -34,9 +32,7 @@ in {
34 }; 32 };
35 address = ["2a03:4000:52:ada:4::/96"]; 33 address = ["2a03:4000:52:ada:4::/96"];
36 routes = [ 34 routes = [
37 { routeConfig = { 35 { Destination = "2a03:4000:52:ada:4::/80";
38 Destination = "2a03:4000:52:ada:4::/80";
39 };
40 } 36 }
41 ]; 37 ];
42 linkConfig = { 38 linkConfig = {
diff --git a/hosts/surtr/default.nix b/hosts/surtr/default.nix
index e6ca0c64..ceb035cb 100644
--- a/hosts/surtr/default.nix
+++ b/hosts/surtr/default.nix
@@ -165,6 +165,7 @@ with lib;
165 algorithm = "zstd"; 165 algorithm = "zstd";
166 }; 166 };
167 167
168 systemd.sysusers.enable = false;
168 system.stateVersion = "20.09"; 169 system.stateVersion = "20.09";
169 }; 170 };
170} 171}
diff --git a/hosts/surtr/vpn/default.nix b/hosts/surtr/vpn/default.nix
index 74a9fb22..61a9d544 100644
--- a/hosts/surtr/vpn/default.nix
+++ b/hosts/surtr/vpn/default.nix
@@ -63,10 +63,8 @@ in {
63 ListenPort = 51820; 63 ListenPort = 51820;
64 }; 64 };
65 wireguardPeers = imap1 (i: { name, ip ? i }: { 65 wireguardPeers = imap1 (i: { name, ip ? i }: {
66 wireguardPeerConfig = { 66 AllowedIPs = ["${prefix6}:${toString ip}::/96" "${prefix4}.${toString ip}/32"];
67 AllowedIPs = ["${prefix6}:${toString ip}::/96" "${prefix4}.${toString ip}/32"]; 67 PublicKey = trim (readFile (./. + "/${name}.pub"));
68 PublicKey = trim (readFile (./. + "/${name}.pub"));
69 };
70 }) [ { name = "geri"; } { name = "sif"; } ]; 68 }) [ { name = "geri"; } { name = "sif"; } ];
71 }; 69 };
72 }; 70 };
@@ -86,19 +84,13 @@ in {
86 MulticastDNS = false; 84 MulticastDNS = false;
87 }; 85 };
88 routes = [ 86 routes = [
89 { routeConfig = { 87 { Destination = "202.61.240.1";
90 Destination = "202.61.240.1";
91 };
92 } 88 }
93 { routeConfig = { 89 { Destination = "0.0.0.0/0";
94 Destination = "0.0.0.0/0"; 90 Gateway = "202.61.240.1";
95 Gateway = "202.61.240.1";
96 };
97 } 91 }
98 { routeConfig = { 92 { Destination = "::/0";
99 Destination = "::/0"; 93 Gateway = "fe80::1";
100 Gateway = "fe80::1";
101 };
102 } 94 }
103 ]; 95 ];
104 extraConfig = '' 96 extraConfig = ''
@@ -114,13 +106,9 @@ in {
114 }; 106 };
115 address = ["${prefix6}::/96" "${prefix4}.0/32"]; 107 address = ["${prefix6}::/96" "${prefix4}.0/32"];
116 routes = [ 108 routes = [
117 { routeConfig = { 109 { Destination = "${prefix6}::/80";
118 Destination = "${prefix6}::/80";
119 };
120 } 110 }
121 { routeConfig = { 111 { Destination = "${prefix4}.0/24";
122 Destination = "${prefix4}.0/24";
123 };
124 } 112 }
125 ]; 113 ];
126 linkConfig = { 114 linkConfig = {