karaolidis/nix
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Change vps wireguard port

Browse Source 
Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>
This commit is contained in:
Nick Karaolidis
2025-06-26 09:14:18 +01:00
parent aca10fdc66
commit d617183438
2 changed files with 5 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
hosts/jupiter-vps/configs/wireguard/default.nix
View File

@@ -1,7 +1,7 @@
{ config, inputs, ... }:
let
jupiterConfig = inputs.self.nixosConfigurations.jupiter.config;
wireguardPort = 51820;
wireguardPort = 51821;
jupiterPublicIPv4 = "51.89.210.124";
in
{
@@ -10,7 +10,7 @@ in
"net.ipv4.conf.all.proxy_arp" = 1;
};
sops.secrets.wireguard = { };
sops.secrets."wireguard/server" = { };
networking = {
firewall = {
@@ -22,7 +22,7 @@ in
ips = [ "10.0.0.1/24" ];
listenPort = wireguardPort;
privateKeyFile = config.sops.secrets.wireguard.path;
privateKeyFile = config.sops.secrets."wireguard/server".path;
peers = [
{

6
hosts/jupiter/configs/wireguard/default.nix
View File

@@ -11,11 +11,9 @@ let
jupiterPublicIPv4 = "51.89.210.124";
in
{
sops.secrets.wireguard = { };
sops.secrets."wireguard/client/vps" = { };
networking = {
firewall.allowedUDPPorts = [ wireguardPort ];
iproute2 = {
enable = true;
rttablesExtraConfig = ''
@@ -33,7 +31,7 @@ in
"${jupiterPublicIPv4}/32"
];
privateKeyFile = config.sops.secrets.wireguard.path;
privateKeyFile = config.sops.secrets."wireguard/client/vps".path;
table = "wireguard";
postSetup = [ "${ip} rule add from ${jupiterPublicIPv4} table ${table}" ];