Setup Wireguard configuration

hosts/cyper-controller/configuration.nix

@@ -22,6 +22,17 @@
     useNetworkd = true;
     useDHCP = false;
     firewall.enable = true;
+    wireguard.interfaces.wg0 = {
+      ips = [ "10.10.0.2/24" ];
+      peers = [
+        {
+          publicKey = "NjMYaUZO/iPRM/J46qyPPuWYg5oSeAUxjocMs/hYTXs=";
+          endpoint = "178.254.8.35:51820";
+          allowedIPs = [ "10.10.0.0/24" ];
+          persistentKeepalive = 25;
+        }
+      ];
+    };
   };
 
   systemd.network = {

hosts/cyper-desktop/configuration.nix

@@ -6,6 +6,17 @@
     useNetworkd = true;
     useDHCP = false;
     firewall.enable = true;
+    wireguard.interfaces.wg0 = {
+      ips = [ "10.10.0.40/24" ];
+      peers = [
+        {
+          publicKey = "NjMYaUZO/iPRM/J46qyPPuWYg5oSeAUxjocMs/hYTXs=";
+          endpoint = "178.254.8.35:51820";
+          allowedIPs = [ "10.10.0.0/24" ];
+          persistentKeepalive = 25;
+        }
+      ];
+    };
   };
 
   systemd.network = {

hosts/cyper-mac/configuration.nix

@@ -1 +1,3 @@
-{ ... }: { }
+{
+  launchd.daemons.wireguard.environment.WG_IP = "10.10.0.3/24";
+}

hosts/cyper-node-1/configuration.nix

@@ -8,6 +8,17 @@
     useNetworkd = true;
     useDHCP = false;
     firewall.enable = true;
+    wireguard.interfaces.wg0 = {
+      ips = [ "10.10.0.30/24" ];
+      peers = [
+        {
+          publicKey = "NjMYaUZO/iPRM/J46qyPPuWYg5oSeAUxjocMs/hYTXs=";
+          endpoint = "178.254.8.35:51820";
+          allowedIPs = [ "10.10.0.0/24" ];
+          persistentKeepalive = 25;
+        }
+      ];
+    };
   };
 
   systemd.network = {

hosts/cyper-node-2/configuration.nix

@@ -8,6 +8,17 @@
     useNetworkd = true;
     useDHCP = false;
     firewall.enable = true;
+    wireguard.interfaces.wg0 = {
+      ips = [ "10.10.0.31/24" ];
+      peers = [
+        {
+          publicKey = "NjMYaUZO/iPRM/J46qyPPuWYg5oSeAUxjocMs/hYTXs=";
+          endpoint = "178.254.8.35:51820";
+          allowedIPs = [ "10.10.0.0/24" ];
+          persistentKeepalive = 25;
+        }
+      ];
+    };
   };
 
   systemd.network = {

hosts/cyper-proxy/configuration.nix

@@ -37,9 +37,37 @@
       "178.254.16.141"
     ];
 
+    wireguard.interfaces.wg0 = {
+      ips = [ "10.10.0.1/24" ];
+      listenPort = 51820;
+      peers = [
+        {
+          publicKey = "EvML4de3CReNW8aF+lJAsPZ+p6FICOyjCsAZJBwIwX8=";
+          allowedIPs = [ "10.10.0.2/32" ];
+        }
+        {
+          publicKey = "WkY45tGnNZQuJTf1MPN6I92spxHts/kpzXRSZE9se2c=";
+          allowedIPs = [ "10.10.0.3/32" ];
+        }
+        {
+          publicKey = "oAstNd7Wxpj2PqSyS87q+8y8WtaLK7hZ5Ytfncml9EM=";
+          allowedIPs = [ "10.10.0.40/32" ];
+        }
+        {
+          publicKey = "GrFH3I5QqjRij7Jl+eOL6Ou6zK6MtH5/kAsA5AmGckM=";
+          allowedIPs = [ "10.10.0.30/32" ];
+        }
+        {
+          publicKey = "IddGAijZVCVxGj/aMasjfroIy9r8Owar4MO9xfvNNBY=";
+          allowedIPs = [ "10.10.0.31/32" ];
+        }
+      ];
+    };
+
     firewall.allowedTCPPorts = [
       80
       443
+      51820
     ];
 
     hosts = {

hosts/cyper-proxy/hardware-configuration.nix

@@ -16,6 +16,7 @@
       ];
       kernelModules = [ ];
     };
+    kernel.sysctl."net.ipv4.ip_forward" = 1;
     kernelModules = [ ];
     extraModulePackages = [ ];
   };
@@ -30,10 +31,9 @@
         "mode=755"
       ];
     };
+
+    "/nix".neededForBoot = true;
+    "/persist".neededForBoot = true;
   };
-
-  fileSystems."/nix".neededForBoot = true;
-  fileSystems."/persist".neededForBoot = true;
-
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
 }