Compare commits
2 commits
083d2646f5
...
8e31dfc529
Author | SHA1 | Date | |
---|---|---|---|
8e31dfc529 | |||
8c27ed2f40 |
3 changed files with 59 additions and 2 deletions
5
hive.nix
5
hive.nix
|
@ -88,7 +88,10 @@ in
|
|||
imports = [
|
||||
./machines/kat-virt
|
||||
];
|
||||
users.users.root.openssh.authorizedKeys.keys = [ id_sylvain ];
|
||||
users.users.root.openssh.authorizedKeys.keys = [
|
||||
id_sylvain
|
||||
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGoQZ/77uiai4rBHYwL55IweUOdR9svxDxlP/o7sulRT gdesfrene@clipper.ens.fr"
|
||||
];
|
||||
};
|
||||
|
||||
kat-mail-test =
|
||||
|
|
|
@ -4,6 +4,7 @@
|
|||
pkgs,
|
||||
mods,
|
||||
sources,
|
||||
nodes,
|
||||
...
|
||||
}:
|
||||
|
||||
|
@ -13,6 +14,17 @@
|
|||
# ./router.nix
|
||||
];
|
||||
|
||||
boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
|
||||
fileSystems."/tmp" = {
|
||||
fsType = "tmpfs";
|
||||
device = "tmpfs";
|
||||
options = [
|
||||
"nosuid"
|
||||
"nodev"
|
||||
"relatime"
|
||||
"size=12G"
|
||||
];
|
||||
};
|
||||
boot.loader = {
|
||||
systemd-boot.enable = true;
|
||||
efi.canTouchEfiVariables = true;
|
||||
|
@ -27,7 +39,43 @@
|
|||
];
|
||||
};
|
||||
};
|
||||
systemd.network.wait-online.anyInterface = true;
|
||||
kat.wireguardPubKey = "zIHvCSzk5a94jvnXU4iscbp9RUGzbWpARDMRgHNtMl4=";
|
||||
systemd.network = {
|
||||
wait-online.anyInterface = true;
|
||||
networks."50-wg0" = {
|
||||
name = "wg0";
|
||||
address = [
|
||||
"10.10.10.13/24"
|
||||
"10.42.1.1/16"
|
||||
];
|
||||
};
|
||||
netdevs."50-wg0" = {
|
||||
netdevConfig = {
|
||||
Name = "wg0";
|
||||
Kind = "wireguard";
|
||||
};
|
||||
wireguardConfig.PrivateKeyFile = "/wg/private.key";
|
||||
|
||||
wireguardPeers = [
|
||||
{
|
||||
AllowedIPs = [
|
||||
"10.10.10.0/24"
|
||||
];
|
||||
PublicKey = "CzUK0RPHsoG9N1NisOG0u7xwyGhTZnjhl7Cus3X76Es=";
|
||||
Endpoint = "129.199.129.76:1194";
|
||||
PersistentKeepalive = 25;
|
||||
}
|
||||
{
|
||||
AllowedIPs = [
|
||||
"10.42.0.0/16"
|
||||
];
|
||||
PublicKey = nodes.kat-watcher.config.kat.wireguardPubKey;
|
||||
Endpoint = "watcher.katvayor.net:1194";
|
||||
PersistentKeepalive = 25;
|
||||
}
|
||||
];
|
||||
};
|
||||
};
|
||||
|
||||
nixpkgs.config.allowUnfree = true;
|
||||
|
||||
|
|
|
@ -77,6 +77,12 @@
|
|||
];
|
||||
PublicKey = nodes.kat-manah.config.kat.wireguardPubKey;
|
||||
}
|
||||
{
|
||||
AllowedIPs = [
|
||||
"10.42.1.1/32"
|
||||
];
|
||||
PublicKey = nodes.kat-probook.config.kat.wireguardPubKey;
|
||||
}
|
||||
];
|
||||
};
|
||||
};
|
||||
|
|
Loading…
Reference in a new issue