Git/Nixconfigs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Refactor the clients

Browse source
This commit is contained in:
Maxiem Geldhof 2025-10-18 14:26:06 +02:00
parent 195a5e1540
commit b6714ee64f
4 changed files with 85 additions and 80 deletions
Download patch file Download diff file Expand all files Collapse all files

2
systems/macbook/macbook.nix
View file

@ -12,7 +12,7 @@ nix-darwin.lib.darwinSystem {
(import ../../modules/usermodules/darwinsettings.nix self)
home-manager.darwinModules.home-manager
./users.nix
./wireguard.nix
(import ./wireguard.nix).systemModule
];
specialArgs = {

55
systems/macbook/wireguard.nix
View file

@ -1,37 +1,32 @@
{ config, ... }:
let
ip = "10.100.0.2/32";
publicKey = (builtins.readFile ../../keys/wg-macbook.pub);
in
{
age.secrets.wg-private.file = ../../keys/wg-macbook;
networking.wg-quick.interfaces.wg-selene = {
privateKeyFile = config.age.secrets.wg-private.path;
systemModule = { config, ... }: {
age.secrets.wg-private.file = ../../keys/wg-macbook;
networking.wg-quick.interfaces.wg-selene = {
privateKeyFile = config.age.secrets.wg-private.path;
# The internal IP address assigned to this client by the server.
# The /24 subnet mask is important for knowing the VPN's local network.
address = [ "10.100.0.2/32" ];
# The internal IP address assigned to this client by the server.
# The /24 subnet mask is important for knowing the VPN's local network.
address = [ ip ];
# DNS server(s) to use when the tunnel is active.
# This is critical for resolving hostnames when all traffic is routed.
dns = [
"1.1.1.1"
"1.0.0.1"
]; # Cloudflare DNS, or use your preferred one like 8.8.8.8
# DNS server(s) to use when the tunnel is active.
# This is critical for resolving hostnames when all traffic is routed.
dns = [
"1.1.1.1"
"1.0.0.1"
]; # Cloudflare DNS, or use your preferred one like 8.8.8.8
peers = [
{
# Public key of the SERVER.
publicKey = builtins.readFile ../../keys/wg-selene.pub;
peers = [
(import ../../modules/servermodules/wireguard/wireguard-server.nix).infoForClients
];
};
};
# The server's public IP address and listening port.
endpoint = "37.27.207.39:51820";
# This is the most important part for a "VPN" setup.
# 0.0.0.0/0 tells your Mac to route all IPv4 traffic through the tunnel.
# Add "::/0" if your server and network support IPv6.
allowedIPs = [ "10.100.0.1/24" ];
# Optional but highly recommended for clients behind NAT.
# It sends a packet every 25 seconds to keep the connection open.
persistentKeepalive = 25;
}
];
peerConfig = {
publicKey = publicKey;
allowedIPs = [ip];
};
}

2
systems/selene/system.nix
View file

@ -17,7 +17,7 @@ nixpkgs.lib.nixosSystem {
(import ../../modules/servermodules/nginx.nix "maxiemgeldhof.com")
../../modules/servermodules/grafana/grafana.nix
../../modules/servermodules/jellyfin/jellyfin.nix
../../modules/servermodules/wireguard/wireguard-server.nix
(import ../../modules/servermodules/wireguard/wireguard-server.nix).serverModule
./volumes.nix
agenix.nixosModules.default
];