reo101/rix101
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(agenix): remove comments, add generators

Browse source
This commit is contained in:
reo101 2023-12-25 19:06:20 +02:00
parent 76e07bf587
commit 5efe96a1de
Signed by: reo101
GPG key ID: 675AA7EF13964ACB
3 changed files with 8 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

13
machines/nixos/x86_64-linux/jeeves/wireguard.nix
View file

@ -11,16 +11,13 @@
# Server
age.secrets."wireguard.private" = {
# file = ../../../../secrets/home/jeeves/wireguard/private.age;
# file = "${inputs.self}/secrets/home/jeeves/wireguard/private.age";
mode = "077";
# FIXME: agenix-rekey
rekeyFile = "${inputs.self}/secrets/home/jeeves/wireguard/private.age";
# generator = {lib, pkgs, file, ...}: ''
# priv=$(${pkgs.wireguard-tools}/bin/wg genkey)
# ${pkgs.wireguard-tools}/bin/wg pubkey <<< "$priv" > ${lib.escapeShellArg (lib.removeSuffix ".age" file + ".pub")}
# echo "$priv"
# '';
generator = {lib, pkgs, file, ...}: ''
priv=$(${pkgs.wireguard-tools}/bin/wg genkey)
${pkgs.wireguard-tools}/bin/wg pubkey <<< "$priv" > ${lib.escapeShellArg (lib.removeSuffix ".age" file + ".pub")}
echo "$priv"
'';
};
networking.firewall.allowedUDPPorts = [51820];