tstarr/dotfiles
1
0
Fork 0
mirror of https://github.com/starr-dusT/dotfiles.git synced 2025-05-19 02:46:06 -07:00
Code Issues Packages Projects Releases Wiki Activity

don't autostart wireguard client on boot

Browse Source
This commit is contained in:
Tyler Starr 2023-10-07 10:14:12 -07:00
parent 47b0d38dde
commit 9fb2873fa1
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
provision/nixos/hosts/kestrel/wireguard-client.nix
View File

@ -4,11 +4,11 @@
allowedUDPPorts = [ 51820 ]; # Clients and peers can use the same port, see listenport allowedUDPPorts = [ 51820 ]; # Clients and peers can use the same port, see listenport
}; };
# Enable WireGuard # Enable WireGuard
networking.wireguard.interfaces = { networking.wg-quick.interfaces = {
# "wg0" is the network interface name. You can name the interface arbitrarily. # "wg0" is the network interface name. You can name the interface arbitrarily.
wg0 = { wg0 = {
# Determines the IP address and subnet of the client's end of the tunnel interface. # Determines the IP address and subnet of the client's end of the tunnel interface.
ips = [ "192.168.2.3/32" ]; address = [ "192.168.2.3/32" ];
listenPort = 51820; # to match firewall allowedUDPPorts (without this wg uses random port numbers) listenPort = 51820; # to match firewall allowedUDPPorts (without this wg uses random port numbers)
# Path to the private key file. # Path to the private key file.
@ -18,6 +18,10 @@
# recommended. # recommended.
privateKeyFile = "/home/${user}/.wireguard/kestrel"; privateKeyFile = "/home/${user}/.wireguard/kestrel";
# Don't autostart peer
# Start with systemctl start wg-quick-wg0
autostart = false;
peers = [ peers = [
# For a client configuration, one peer entry for the server will suffice. # For a client configuration, one peer entry for the server will suffice.
@ -31,7 +35,7 @@
#allowedIPs = [ "10.100.0.1" "91.108.12.0/22" ]; #allowedIPs = [ "10.100.0.1" "91.108.12.0/22" ];
# Set this to the server IP and port. # Set this to the server IP and port.
endpoint = "192.168.1.175:51820"; # ToDo: route to endpoint not automatically configured https://wiki.archlinux.org/index.php/WireGuard#Loop_routing https://discourse.nixos.org/t/solved-minimal-firewall-setup-for-wireguard-client/7577 endpoint = "66.218.43.87:51820"; # ToDo: route to endpoint not automatically configured https://wiki.archlinux.org/index.php/WireGuard#Loop_routing https://discourse.nixos.org/t/solved-minimal-firewall-setup-for-wireguard-client/7577
# Send keepalives every 25 seconds. Important to keep NAT tables alive. # Send keepalives every 25 seconds. Important to keep NAT tables alive.
persistentKeepalive = 25; persistentKeepalive = 25;