summaryrefslogtreecommitdiff
path: root/modules/yggdrasil-wg
diff options
context:
space:
mode:
Diffstat (limited to 'modules/yggdrasil-wg')
-rw-r--r--modules/yggdrasil-wg/default.nix23
-rw-r--r--modules/yggdrasil-wg/hosts/4/skadhi.priv18
-rw-r--r--modules/yggdrasil-wg/hosts/4/skadhi.pub1
-rw-r--r--modules/yggdrasil-wg/hosts/6/skadhi.priv18
-rw-r--r--modules/yggdrasil-wg/hosts/6/skadhi.pub1
5 files changed, 61 insertions, 0 deletions
diff --git a/modules/yggdrasil-wg/default.nix b/modules/yggdrasil-wg/default.nix
index 8b190651..c17c8f08 100644
--- a/modules/yggdrasil-wg/default.nix
+++ b/modules/yggdrasil-wg/default.nix
@@ -48,33 +48,56 @@ let
48 PersistentKeepalive = 25; 48 PersistentKeepalive = 25;
49 family = "4"; 49 family = "4";
50 } 50 }
51 { from = "skadhi";
52 to = "surtr";
53 endpointHost = "202.61.241.61";
54 PersistentKeepalive = 25;
55 family = "4";
56 }
57 { from = "skadhi";
58 to = "surtr";
59 endpointHost = "2a03:4000:52:ada::";
60 PersistentKeepalive = 25;
61 family = "6";
62 }
63 { from = "skadhi";
64 to = "vidhar";
65 endpointHost = "10.141.0.1";
66 PersistentKeepalive = 25;
67 family = "4";
68 }
51 ]; 69 ];
52 wgHostIPs = mapAttrs (_family: wgSubnet: { 70 wgHostIPs = mapAttrs (_family: wgSubnet: {
53 surtr = "${wgSubnet}::/${toString wgHostLength}"; 71 surtr = "${wgSubnet}::/${toString wgHostLength}";
54 vidhar = "${wgSubnet}:1::/${toString wgHostLength}"; 72 vidhar = "${wgSubnet}:1::/${toString wgHostLength}";
55 sif = "${wgSubnet}:2::/${toString wgHostLength}"; 73 sif = "${wgSubnet}:2::/${toString wgHostLength}";
74 skadhi = "${wgSubnet}:3::/${toString wgHostLength}";
56 }) wgSubnet; 75 }) wgSubnet;
57 greHostMACPrefixes = { 76 greHostMACPrefixes = {
58 "4" = { 77 "4" = {
59 surtr = "02:00:01:00:00"; 78 surtr = "02:00:01:00:00";
60 vidhar = "02:00:01:00:01"; 79 vidhar = "02:00:01:00:01";
61 sif = "02:00:01:00:02"; 80 sif = "02:00:01:00:02";
81 skadhi = "02:00:01:00:03";
62 }; 82 };
63 "6" = { 83 "6" = {
64 surtr = "02:00:02:00:00"; 84 surtr = "02:00:02:00:00";
65 vidhar = "02:00:02:00:01"; 85 vidhar = "02:00:02:00:01";
66 sif = "02:00:02:00:02"; 86 sif = "02:00:02:00:02";
87 skadhi = "02:00:02:00:03";
67 }; 88 };
68 }; 89 };
69 batHostMACs = { 90 batHostMACs = {
70 surtr = "02:00:00:00:00:00"; 91 surtr = "02:00:00:00:00:00";
71 vidhar = "02:00:00:01:00:00"; 92 vidhar = "02:00:00:01:00:00";
72 sif = "02:00:00:02:00:00"; 93 sif = "02:00:00:02:00:00";
94 skadhi = "02:00:00:03:00:00";
73 }; 95 };
74 batHostIPs = { 96 batHostIPs = {
75 surtr = ["${batSubnet}::/${toString batHostLength}"]; 97 surtr = ["${batSubnet}::/${toString batHostLength}"];
76 vidhar = ["${batSubnet}:1::/${toString batHostLength}"]; 98 vidhar = ["${batSubnet}:1::/${toString batHostLength}"];
77 sif = ["${batSubnet}:2::/${toString batHostLength}"]; 99 sif = ["${batSubnet}:2::/${toString batHostLength}"];
100 skadhi = ["${batSubnet}:3::/${toString batHostLength}"];
78 }; 101 };
79 routers = [ "surtr" ]; 102 routers = [ "surtr" ];
80 103
diff --git a/modules/yggdrasil-wg/hosts/4/skadhi.priv b/modules/yggdrasil-wg/hosts/4/skadhi.priv
new file mode 100644
index 00000000..dd66633f
--- /dev/null
+++ b/modules/yggdrasil-wg/hosts/4/skadhi.priv
@@ -0,0 +1,18 @@
1{
2 "data": "ENC[AES256_GCM,data:fXF8DV6vgpbJJWQvjIS3sFZ+yUEPtWwAZQrDLT8jueqDdn/IVaZGlq+DEnT0,iv:FU0ofu31RZlq2qMcMHlzYoRB61g+vwaG2JjPrKUgxYI=,tag:+dLvtiKmYdtk9NCXV8Yn9w==,type:str]",
3 "sops": {
4 "age": [
5 {
6 "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQR25od0g4MGhLY2d0Y1Fx\nS3RGVE1UbTFEc1Qzakx0VFdDbWNTdnU1MXowCkxNMXJycGlEVFEvV1dtQ3B3WXVX\nRm12ZmZTUTd6WGtvQkNJQzlsTVF1RHcKLS0tIE9tMzIzWFlWNHdINTkrSmcwYVNT\nVEVzSWFjMWJLSmRPRmZlQ1ZVMktLQ28KAUOrlZCuSZwF7QkOSz1dQ4Uj2f8gvjtM\n3c4sXQ3P77Rqluijsxo9KQx7Q0lRGBaRPMY4IrnHNPogd8iOHPeZuA==\n-----END AGE ENCRYPTED FILE-----\n",
7 "recipient": "age1rmmhetcmllq0ahl5qznlr0eya2zdxwl9h6y5wnl97d2wtyx5t99sm2u866"
8 },
9 {
10 "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArWmlPTWUrZ1QvYVBSckFL\nelZtcGdEMDBHeE5ROVdVdEJvWHpISzN3OVhjCkpSSTg2dDNqZjZYY0RyRlpuTi96\nS1l1dzJPV0NKbEJVdWpkTnZNZXJ0Qk0KLS0tIElBMmxJcmlxekVxRm1VdkgrSkNm\nZXhaMlhNdi9hVlNKaXU5MGVnK2NZWnMKjavFZczePCyYb2X4UsFNOaB5g+g1KZ52\npl+NTzRsUIXqPZnRDcCkGDjlQgLnZ+A22Enhbpj21ThiPV7bTyFh2g==\n-----END AGE ENCRYPTED FILE-----\n",
11 "recipient": "age1u6xegt79rarmyz8qy4pl7jh9lh90vx8fg0frmh4u2mzam7zydq4s4agz4e"
12 }
13 ],
14 "lastmodified": "2026-09-24T04:46:17Z",
15 "mac": "ENC[AES256_GCM,data:cubfKvUaDE6XNb9Y/1dbXpwayRXoZjiM9T3dN+YVeS6/5WX+hMC7We6mdge5VBnZ9CjA3XXNy+ZP1DEaPSg1OsBq1ubnFuVbaRKZlFl1B4I+6e4xpsZdQiyZT3SFZoM/LI1oM6kxD8e1n7KjFWNRx3yqAMaK3z1Ko1AlAmkmDx8=,iv:ME5EYC/MvuFxY7es250VcW0z2x1tCInCPrZnr4mBjrw=,tag:Jfd3uEVibe6Iw/3uNc+UTQ==,type:str]",
16 "version": "3.13.3"
17 }
18}
diff --git a/modules/yggdrasil-wg/hosts/4/skadhi.pub b/modules/yggdrasil-wg/hosts/4/skadhi.pub
new file mode 100644
index 00000000..a722609e
--- /dev/null
+++ b/modules/yggdrasil-wg/hosts/4/skadhi.pub
@@ -0,0 +1 @@
x5c5441ah63QZRbj+IV711Xv3JZOQYQON8Zo7rzU6i4=
diff --git a/modules/yggdrasil-wg/hosts/6/skadhi.priv b/modules/yggdrasil-wg/hosts/6/skadhi.priv
new file mode 100644
index 00000000..848cd299
--- /dev/null
+++ b/modules/yggdrasil-wg/hosts/6/skadhi.priv
@@ -0,0 +1,18 @@
1{
2 "data": "ENC[AES256_GCM,data:lOitSuIg4Xjr5xycgaXBWkA79zySQOy+ZPXUxRjbU3F3/YHbcyrKYatVygdf,iv:8QcEXehosL/zUYxbNE284GfQHjz6HzBIyscigtNiDw8=,tag:eRINZKIv4UwprovUq7016Q==,type:str]",
3 "sops": {
4 "age": [
5 {
6 "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLY2U0S2tUZHpXSjVoTk1m\nSWlXK0UyWm5SMGxBbUtHTFp1U3NadUliemlNCjArMHdJVk5BYzVSK0F5RGdMQU1E\nMEZuUkt3R29sdHZsRnFPaVhlUzVpaWcKLS0tIDFXOEpFOC94NlEzZnZqY2F6VERt\nc3lvZEt2b0tVU3pvMU5VR1dqYUtFbUEKcRVTIkz5bz47rAkihOTJLJPvA0mqabUM\nUr+zZjdrWTKqnWuEcJ93xsCKyo4kC1k/SkaXia65krhi9z4BVe5kgQ==\n-----END AGE ENCRYPTED FILE-----\n",
7 "recipient": "age1rmmhetcmllq0ahl5qznlr0eya2zdxwl9h6y5wnl97d2wtyx5t99sm2u866"
8 },
9 {
10 "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRWUxYNXNXODAzb2daTC9Y\nSmtHRHUwZmRoaXhpTmpDbXZSMkkwMjI0Q2pnCi92RFgrK2pSTFdIL29wT09lVGZM\nTWxXamlSOVpOdXoxcSttSDNkUDJ1K0UKLS0tIC9rVnNXZWxhd2J3NGd2NkdUOUVO\nbE9ha1RyS3dOczNXa3pjVkh3bm5RS1kK4APdzi4AKkI7z5S2zpFkipkldVzeYO0Q\nGck0KtHhM8ZRTqJ9Q7WID2JwbAV5og3924SAYFbQvYdSd2zGqkD+Aw==\n-----END AGE ENCRYPTED FILE-----\n",
11 "recipient": "age1u6xegt79rarmyz8qy4pl7jh9lh90vx8fg0frmh4u2mzam7zydq4s4agz4e"
12 }
13 ],
14 "lastmodified": "2026-09-24T04:46:30Z",
15 "mac": "ENC[AES256_GCM,data:5mgUxl7FQCgmCWL2SRtf7FOi5z64scb9Qt/rUwPMdenAuTG0ED3NVGOATTVoco7l0MBbs/D7OBKDMMvJ/Odgo0I9srRDyhXdrVbVKMphD1uXAwxPaK2iUeK3xz93Kzvr17UXzd7SwXTReokv/lIcFyDqUvlBXGWxZdYsc/rf4Us=,iv:50ByoxaHrl6qQbKoEEAgUIpYyhVhp47AYnagbH8n5kA=,tag:5KjE/A7EwiG/sSGpkkQBcg==,type:str]",
16 "version": "3.13.3"
17 }
18}
diff --git a/modules/yggdrasil-wg/hosts/6/skadhi.pub b/modules/yggdrasil-wg/hosts/6/skadhi.pub
new file mode 100644
index 00000000..7a51045a
--- /dev/null
+++ b/modules/yggdrasil-wg/hosts/6/skadhi.pub
@@ -0,0 +1 @@
BtEGTPfLbtQJAAHfG/7jBissxcR/IfIRqeqhZG2dr0k=