hackens-org-configurations/hackens/vpn-network/default.nix
2021-11-02 19:30:28 +01:00

17 lines
301 B
Nix

{ pkgs, ... }:
{
imports = [
./wg-peers.nix
];
networking.wireguard.interfaces.wghackens = {
ips = [ "192.168.2.1/24" ];
listenPort = 51820;
privateKeyFile = "/etc/secrets/wghackens";
generatePrivateKeyFile = true;
};
boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
}