reo101/rix101
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(jeeves): wireguard peer's PublicKey should not be a file

Browse source
This commit is contained in:
reo101 2023-10-23 09:24:31 +03:00
parent a4004be93e
commit c707909f4f
Signed by: reo101
GPG key ID: 675AA7EF13964ACB
3 changed files with 1 additions and 22 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
machines/nixos/x86_64-linux/jeeves/wireguard.nix
View file

@ -18,11 +18,6 @@
file = ../../../../secrets/home/wireguard/server.public.age; file = ../../../../secrets/home/wireguard/server.public.age;
}; };
# Peers
age.secrets."wireguard/cheetah.pub" = {
file = ../../../../secrets/home/wireguard/cheetah.pub.age;
};
networking.firewall.allowedUDPPorts = [51820]; networking.firewall.allowedUDPPorts = [51820];
systemd.network = { systemd.network = {
netdevs = { netdevs = {
@ -40,7 +35,7 @@
{ {
# cheetah # cheetah
wireguardPeerConfig = { wireguardPeerConfig = {
PublicKey = config.age.secrets."wireguard/cheetah.pub".path; PublicKey = "CFTGvBcly791ClwyS6PzTjmqztvYJW2eklR7it/QhxI=";
AllowedIPs = [ AllowedIPs = [
"0.0.0.0/0" "0.0.0.0/0"
# "::/0" # "::/0"

15
secrets/home/wireguard/cheetah.pub.age
View file

@ -1,15 +0,0 @@
-----BEGIN AGE ENCRYPTED FILE-----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-----END AGE ENCRYPTED FILE-----

1
secrets/secrets.nix
View file

@ -25,5 +25,4 @@ in
"home/jeeves_password.age".publicKeys = users ++ [ jeeves_system ]; "home/jeeves_password.age".publicKeys = users ++ [ jeeves_system ];
"home/wireguard/server.private.age".publicKeys = users ++ [ jeeves_system ]; "home/wireguard/server.private.age".publicKeys = users ++ [ jeeves_system ];
"home/wireguard/server.public.age".publicKeys = users ++ [ jeeves_system ]; "home/wireguard/server.public.age".publicKeys = users ++ [ jeeves_system ];
"home/wireguard/cheetah.pub.age".publicKeys = users ++ [ jeeves_system ];
} }