tstarr/dotfiles
1
0
Fork 0
mirror of https://github.com/starr-dusT/dotfiles.git synced 2025-02-19 19:27:31 -08:00
Code Issues Packages Projects Releases Wiki Activity

use cat for injecting nix-sops secrets in chezmoi and readd configs for bulwark and adjudicator

Browse Source
This commit is contained in:
Tyler Starr 2023-11-22 01:12:18 -08:00
parent a15f1c72f8
commit afdff4d779
3 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
home/.chezmoi.yaml Normal file
View File

@ -0,0 +1,2 @@
secret:
command: "cat"

11
home/private_dot_wireguardd/adjudicator.conf.tmpl Normal file
View File

@ -0,0 +1,11 @@
[Interface]
# your own IP on the wireguard network
Address = 192.168.3.2/24
PrivateKey = {{ (secret "/run/secrets/wireguard/adjudicator") }}
[Peer]
PublicKey = bd7bbZOngl/FTdBlnbIhgCLNf6yx5X8WjiRB7E1NEQQ=
# restrict this to the wireguard subnet if you don't want to route everything to the tunnel
AllowedIPs = 0.0.0.0/0, ::/0
# ip and port of the peer
Endpoint = 66.218.43.87:51820

11
home/private_dot_wireguardd/bulwark.conf.tmpl Normal file
View File

@ -0,0 +1,11 @@
[Interface]
# your own IP on the wireguard network
Address = 192.168.3.4/24
PrivateKey = {{ (secret "/run/secrets/wireguard/bulwark") }}
[Peer]
PublicKey = bd7bbZOngl/FTdBlnbIhgCLNf6yx5X8WjiRB7E1NEQQ=
# restrict this to the wireguard subnet if you don't want to route everything to the tunnel
AllowedIPs = 0.0.0.0/0, ::/0
# ip and port of the peer
Endpoint = 66.218.43.87:51820