osprey wireguard setup

This commit is contained in:
Tyler Starr 2024-10-21 10:08:22 -07:00
parent 21f92fbb59
commit 5f4b32212f
4 changed files with 13 additions and 7 deletions

View File

@ -39,13 +39,13 @@
system = { system = {
ssh.enable = true; ssh.enable = true;
terminal.enable = true; terminal.enable = true;
#wireguard-client = { wireguard-client = {
# enable = true; enable = true;
# privateKeyFile = "/run/agenix/wireguard/kestrel"; privateKeyFile = "/run/agenix/wireguard/osprey";
# address = [ "192.168.3.3/24" ]; address = [ "192.168.3.3/24" ];
# publicKey = "bd7bbZOngl/FTdBlnbIhgCLNf6yx5X8WjiRB7E1NEQQ="; publicKey = "bd7bbZOngl/FTdBlnbIhgCLNf6yx5X8WjiRB7E1NEQQ=";
# endpoint = "66.218.43.87"; endpoint = "66.218.43.87";
#}; };
}; };
}; };
} }

View File

@ -57,6 +57,11 @@
publicKey = "CDoy/XI8FRQV/ySHigLWG2tpWVw8hgEZXRQCEE3qYHQ="; publicKey = "CDoy/XI8FRQV/ySHigLWG2tpWVw8hgEZXRQCEE3qYHQ=";
allowedIPs = [ "192.168.3.4/32" ]; allowedIPs = [ "192.168.3.4/32" ];
} }
{
# Osprey
publicKey = "xOn/GB4iK27f8oTrITodNNPIk6I4l34Fsde6i97aFR0=";
allowedIPs = [ "192.168.3.5/32" ];
}
# More peers can be added here. # More peers can be added here.
]; ];
}; };

View File

@ -16,6 +16,7 @@ in
"wireguard/kestrel.age".publicKeys = users ++ systems; "wireguard/kestrel.age".publicKeys = users ++ systems;
"wireguard/torus.age".publicKeys = systems; "wireguard/torus.age".publicKeys = systems;
"wireguard/bulwark.age".publicKeys = systems; "wireguard/bulwark.age".publicKeys = systems;
"wireguard/osprey.age".publicKeys = [ tstarr_osprey ] ++ systems;
"git/gitea-runner-1.age".publicKeys = systems; "git/gitea-runner-1.age".publicKeys = systems;
"nextcloud/password.age".publicKeys = systems; "nextcloud/password.age".publicKeys = systems;
"ssh/kestrel/id_ed25519.age".publicKeys = [ tstarr_kestrel ] ++ systems; "ssh/kestrel/id_ed25519.age".publicKeys = [ tstarr_kestrel ] ++ systems;

Binary file not shown.