Setup Wireguard configuration

2026-06-29 11:24:19 +02:00
parent 23ecd70457
commit cbfb1fef0e
13 changed files with 144 additions and 18 deletions
@@ -11,7 +11,7 @@
  imports = [
    ./sops.nix
    ./locale.nix
-    ./tailscale.nix
+    ./wireguard.nix
    ./ssh.nix
    ./impermanence.nix
  ]
@@ -1,10 +0,0 @@
-{ config, ... }:
-{
-  sops.secrets.tailscale_auth_key = { };
-
-  services.tailscale = {
-    enable = true;
-    openFirewall = true;
-    authKeyFile = config.sops.secrets.tailscale_auth_key.path;
-  };
-}
@@ -0,0 +1,14 @@
+{ config, hostName, ... }:
+{
+  sops.secrets."wireguard/${hostName}" = {
+    mode = "0400";
+  };
+
+  networking = {
+    wireguard.interfaces.wg0 = {
+      privateKeyFile = config.sops.secrets."wireguard/${hostName}".path;
+    };
+    firewall.allowedUDPPorts = [ 51820 ];
+  };
+
+}