karaolidis/nix
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Change vps wireguard port

Browse Source 
Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>
This commit is contained in:
Nick Karaolidis
2025-06-26 09:14:18 +01:00
parent aca10fdc66
commit d617183438
2 changed files with 5 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
hosts/jupiter-vps/configs/wireguard/default.nix
View File

@@ -1,7 +1,7 @@
{ config, inputs, ... }: { config, inputs, ... }:
let let
jupiterConfig = inputs.self.nixosConfigurations.jupiter.config; jupiterConfig = inputs.self.nixosConfigurations.jupiter.config;
wireguardPort = 51820; wireguardPort = 51821;
jupiterPublicIPv4 = "51.89.210.124"; jupiterPublicIPv4 = "51.89.210.124";
in in
{ {
@@ -10,7 +10,7 @@ in
"net.ipv4.conf.all.proxy_arp" = 1; "net.ipv4.conf.all.proxy_arp" = 1;
}; };
sops.secrets.wireguard = { }; sops.secrets."wireguard/server" = { };
networking = { networking = {
firewall = { firewall = {
@@ -22,7 +22,7 @@ in
ips = [ "10.0.0.1/24" ]; ips = [ "10.0.0.1/24" ];
listenPort = wireguardPort; listenPort = wireguardPort;
privateKeyFile = config.sops.secrets.wireguard.path; privateKeyFile = config.sops.secrets."wireguard/server".path;
peers = [ peers = [
{ {

6
hosts/jupiter/configs/wireguard/default.nix
View File

@@ -11,11 +11,9 @@ let
jupiterPublicIPv4 = "51.89.210.124"; jupiterPublicIPv4 = "51.89.210.124";
in in
{ {
sops.secrets.wireguard = { }; sops.secrets."wireguard/client/vps" = { };
networking = { networking = {
firewall.allowedUDPPorts = [ wireguardPort ];
iproute2 = { iproute2 = {
enable = true; enable = true;
rttablesExtraConfig = '' rttablesExtraConfig = ''
@@ -33,7 +31,7 @@ in
"${jupiterPublicIPv4}/32" "${jupiterPublicIPv4}/32"
]; ];
privateKeyFile = config.sops.secrets.wireguard.path; privateKeyFile = config.sops.secrets."wireguard/client/vps".path;
table = "wireguard"; table = "wireguard";
postSetup = [ "${ip} rule add from ${jupiterPublicIPv4} table ${table}" ]; postSetup = [ "${ip} rule add from ${jupiterPublicIPv4} table ${table}" ];