Files
nix-config/hosts/hurricane/vpn.nix
Felix Schulze b5f1989145 hurricane: 89 current 2025-06-26 20:17:54 25.05.20250620.b2485d5 6.15.3 *
hurricane: 90 current  2025-06-26 20:24:18  25.05.20250620.b2485d5     6.15.3                          *

hurricane: 91 current  2025-06-26 20:29:03  25.05.20250620.b2485d5     6.15.3                          *

vpn config

dont put address or endpoint in allowed IPs!

Revert "hurricane: 90 current  2025-06-26 20:24:18  25.05.20250620.b2485d5     6.15.3                          *"

This reverts commit b067ce371692e26e45d3d134dda8d56a3168c3bb.
2025-06-26 21:02:49 +02:00

59 lines
2.0 KiB
Nix

{
networking.wg-quick.interfaces = {
wg-felix = {
address = ["10.8.0.4/24"];
dns = ["192.168.0.128"];
privateKeyFile = "/home/schulze/Nextcloud/secrets/wireguard/Felix-Hurricane-pk";
peers = [
{
publicKey = "a35ZSWhBNzPFkf1RCkg4E7cNnUdGGOr4CsA0EM65H0g=";
presharedKeyFile = "/home/schulze/Nextcloud/secrets/wireguard/Felix-Hurricane-psk";
allowedIPs = ["192.168.0.0/24"];
endpoint = "vpn.schulze.network:51820";
persistentKeepalive = 25;
}
];
};
wg-csb = {
address = ["192.168.108.17/22" "2a02:9a0:102:108::17/64"];
privateKeyFile = "/home/schulze/Nextcloud/secrets/wireguard/CSB-Hurricane-pk";
peers = [
{
publicKey = "mTORKHkPcp9+c7VXqVfVseIOQZuJftoUYA0pBe87bDQ=";
allowedIPs = ["172.18.0.0/16" "192.168.3.0/24" "2a02:9a0:ffff::/48" "2a02:9a0:fffe::/48"];
endpoint = "prod-net-vpn1.infra.brainmill.com:51819";
persistentKeepalive = 25;
}
];
};
wg-fg = {
address = ["10.255.11.11/24" "2a02:9a0:300:fff0:11::11/64"];
privateKeyFile = "/home/schulze/Nextcloud/secrets/wireguard/FG-Hurricane-pk";
peers = [
{
publicKey = "h/BUyzXy0Xo4KJKS/U5V4C9rDJT3fWjjiZoy0I7P+H4=";
allowedIPs = ["10.0.0.0/8" "192.168.10.0/24" "2a02:9a0:300:fff0::/64"];
endpoint = "gw1.net.chsfg.se:51831";
persistentKeepalive = 25;
}
];
};
wg-neanet = {
address = ["192.168.108.25/32" "2a09:2681:204:1::27/64"];
privateKeyFile = "/home/schulze/Nextcloud/secrets/wireguard/Neanet-Hurricane-pk";
peers = [
{
publicKey = "nz1m0crkdarW7y+/p6hKCGncMVHlVhbz0URA6Z71RmM=";
allowedIPs = ["172.18.255.0/24" "2a09:2681:ffff:13::/64" "2a09:2681:ffff:14::/64" "2a09:2681:ffff:15::/64" "2a09:2681:ffff:16::/64"];
endpoint = "prod-jump-got1.infra.brainmill.com:51820";
persistentKeepalive = 25;
}
];
};
};
}