diff options
| author | Tim Keller <tjk@tjkeller.xyz> | 2026-09-24 20:24:17 -0500 |
|---|---|---|
| committer | Tim Keller <tjk@tjkeller.xyz> | 2026-09-24 20:24:17 -0500 |
| commit | 61965bcf03c9d9f135151ca67ab7eaf71a4851a7 (patch) | |
| tree | b22a48bd525b8dee1b45eaf6ec2d92c830284618 | |
| parent | 0ad9549ab28e507241c146ad81f8c440f48bcc43 (diff) | |
| download | nixos-61965bcf03c9d9f135151ca67ab7eaf71a4851a7.tar.xz nixos-61965bcf03c9d9f135151ca67ab7eaf71a4851a7.zip | |
| -rw-r--r-- | hosts/flex-wg-router/configuration.nix | 38 | ||||
| -rw-r--r-- | hosts/flex-wg-router/resources/secrets/wg.yaml | 8 | ||||
| -rw-r--r-- | hosts/flex-wg-router/wg.nix | 2 |
3 files changed, 27 insertions, 21 deletions
diff --git a/hosts/flex-wg-router/configuration.nix b/hosts/flex-wg-router/configuration.nix index a0777f0..22fd06d 100644 --- a/hosts/flex-wg-router/configuration.nix +++ b/hosts/flex-wg-router/configuration.nix @@ -29,10 +29,10 @@ in { }; # Set ip addresses interfaces = { - lan0.ipv4.addresses = [{ - address = ipAddress; - prefixLength = 24; - }]; + lan0.ipv4.addresses = [ + { address = ipAddress; prefixLength = 24; } + { address = "192.168.77.4"; prefixLength = 24; } + ]; wan0.ipv4.addresses = [{ address = "46.110.173.163"; # Reserved static ip for wg-router prefixLength = 31; @@ -60,19 +60,25 @@ in { }; }; dnsDhcpConfig = { - localDomain = "wg-router.pls.lan"; - dhcp = { - defaultGateway = ipAddress; - localhostIp = ipAddress; - rangeStart = "10.1.1.100"; - rangeEnd = "10.1.1.250"; - staticLeases = { - idrac-8HT2W52 = { - macAddress = "18:fb:7b:9d:16:b3"; - staticIp = "10.1.1.10"; - }; - }; + dhcp.enable = false; + # Point to separate dns server at pls.lan for local resolution + localResolution = { + localDomain = "pls.lan"; + localDnsAddress = "192.168.77.1@53"; + localReverseZone = "77.168.192.in-addr.arpa"; }; + #dhcp = { + # defaultGateway = ipAddress; + # localhostIp = ipAddress; + # rangeStart = "10.1.1.100"; + # rangeEnd = "10.1.1.250"; + # staticLeases = { + # idrac-8HT2W52 = { + # macAddress = "18:fb:7b:9d:16:b3"; + # staticIp = "10.1.1.10"; + # }; + # }; + #}; }; }; diff --git a/hosts/flex-wg-router/resources/secrets/wg.yaml b/hosts/flex-wg-router/resources/secrets/wg.yaml index 1f6867b..97867cc 100644 --- a/hosts/flex-wg-router/resources/secrets/wg.yaml +++ b/hosts/flex-wg-router/resources/secrets/wg.yaml @@ -1,5 +1,5 @@ -wg1: ENC[AES256_GCM,data:r7jNBzEcItmlEtjhKCbyOBaNYfutKxC2UdUYSLHfYyLnwwdIwM1kfvd5K1/UZNAKoG7sHpBha59M1tvZAOIGAFnzG14YsVrMD8w6Qy4pc0FmdyNHDEM4EwaqHFRjbb5oBAFv6lI2VZ3AgXf6StXoVUYtbEA1QBVqVq4Syk6/CalnhkE2LuZpuVA5GZUZ8aTmFRp9zOnhcNoVJMrokTUswV4Mgn3zt2Tb+3bfoZJ9jbb6H8P/F0NGU+phy0EENZMIqOGBP5aPPIZfVQYphQcG6BYiddti3Copq57vqh/qOB70LPle6b/IsaT/K8Xqjp8PjNI/e5gkZdVwIGx/w3Gk0+CkD0tDEUMBdsFfvm7Dbz3xQxN66/0ZMGQgic0xtytr/DfKCIMIwsr33GKavP7OXEJ6lUF615Y4PQhNNx4ePlgcttt2b7TG5bM8nxKsaQ==,iv:mLYNgKXCp8w2JO90Rsn7gtifEn4Yc6JKnjws7uo1w10=,tag:c51B1fZe1HnJhFDc86HnOg==,type:str] -wg0: ENC[AES256_GCM,data:SJQ21aLwoQ0nEHfoHRd+ksL8pX7HoCRVjGIS/BZxq9JQhHJg9ZHHbwwUkz/3vrq1S+PD7e1bL0FHpgHPuZVHawpaFIeWd6TEPH+6oUxlRbDaEbcWR5POlNyMVV3z9TnOElgmqT0VUqfY80NEqFPbCLdjcWHjnwO4nzrEhPMA9WG2PFCAnZNUtVXh2mnblA61/xmxkSVysahBP+bTHA8a+v/AXy7WrHbnHizTeevdCMqWyDhzHvO8hfH4tU/xJ7GQrG/bxk4JZ6XT8a2CAqmNEKyWicB/zSc5NdILNQL7Kx2mzg/fDp4nltf7iBRZfLuN+r7whrKJ2lJQPATeyjMlIgHUcnohjihiOsGYiBcB3/Y4hIHVt7rRBMoFBB2OgNKC3gx6saZreRxLHZcRZFcVm39G9vaw6EI=,iv:qO8vMlstL/kOxFSlUd/dCtAK9ZzZt+LH/9vfulqHiMc=,tag:yuiwA8Hp8qDrF3UPlCMSUg==,type:str] +wg1: ENC[AES256_GCM,data:GDmORbMvBY9vQ0eppWM71eABSVFgGeoGD7CTu5otyAWr/fGKraGaRKHnj3i/wTQV2oxeI1eBKJoAcNI4vdoS584pffo9qXi5A8xQ6UppqEdqbMGqsoiVElGbJXoZxx9Lgl0abgy9DOvMNFhWQzEPnqW/QRXxzClsazB0oveafqx1cXMnU4WestLKvCyK7UL5GVCrp18qw2UzIeuoTY9zyQ3Dt9/Tmlg9tsjLy4bWmTyrgyeYOKc2x0Aocxz6yvadN76Vp6vm9Fcxvu0szxBrVauIxCzqpL6pyy3wvLm+aka6CkLhviZ38GtZ8GXXSqB1Lf52mz3udKqLZAau1ANqfAhzKqUapKPxn+fpo+JIIRw4+boXtO/3Z8YPjiyUQcFrhRkSCI7cm2w+rCcm/p+2YiBPpMGSCDcyJqZeKbgM8MPkpbr3EEg4ruqNJYN/cnk=,iv:O8QYsHCEzTW6Y4s31OKjjcAxAToQwLfAIEzCtUZT6IM=,tag:M0Juai3qMJiabN1kgYLvOA==,type:str] +wg0: ENC[AES256_GCM,data:YIu2svPOijXaEUAbzH+5hAwd8XpSZrq3OwfWj+q0lH63ug4zs3poNlUXShZLKYJTZ+cyyKyfXGNu0NG4p0dNHH988bCeRyLE21ih54acYRCIpd7WLvV1whJhdl2NgFyhDPEDkY0RQQ447NnU/juSyAWf4wf36vR6OCWvWvsVzecIiZw9DzJT5oyy+Ao1LWrW6UxVKi85pM11KrbcZOvBjLsiaSwa9Y9cmS4LY+N/yKLJLbI1txVJ3naLAKToJn3WnRKutB8NA39wlWpSHjlqCsKKkyfl6Cj8/LWDcYlxU8YqBFX75Cm683TAqzRxCqsPFDsmxfx8oi8OODnpXSkq8wQMdlw4bc+JVRr/mtVCsx9OrigIOhJ9ftMugaYC32LRPKvpD3eYylVDNJncLulekPeMoytzWakAs6AKE3Z4DwQqimAHQIiteD903aSWlWpk6/WypXrSMVBp7fdklAvKhBhoPwFwmJyjY/cWz3qLkovCgk95Go4xstFdDBKz2FDmNlG8IJBTm0clRumUjW2amtHevmn1jRZyPXc2z1xJv+6vuHe5jfyuSHZOjbuYmn4s/0hRpMNWS1DfQ5TIvJa4TKPXEmYrxx1So1zOZUF6,iv:Cd7iHHGIEy5w99kPuMb8FDl/YqXjEYvQx80ZkUYXmCI=,tag:SlWiPnjgiNO0eexNLN5hxA==,type:str] sops: age: - recipient: age1f0tmpy2nam58skmznjyqd3zf54rxtfrk6fda0vlpq9y3yg6wac7sjf0vja @@ -11,7 +11,7 @@ sops: L25wUWRJbzZMZDFseXdvOFJXQVRxN28KJjC3ola24tTEV8tFYpnsId4d0S+jHkS9 ME6i4jorWRlQKdYn/gTUoqgMAvJEc73hjTfgX6bFshhuhflfGxXQQw== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-03-31T19:40:45Z" - mac: ENC[AES256_GCM,data:XON+JNOWr6WRYYI0+vCC4qiDST8iY/XQZlkB16l5vMsirS3j5iAIi60hn5viFqMn+IIV7GretbVnBVP32R4C59II8bIySzrsdJj5AuvTvdBvglhkelhiDnchqE98KCG9zr41bJsSaQ/8ubRy7b5jiu9aqzQFg9UQZousecIu/MU=,iv:IJNCc05iu0sZxa3RFh5l1TMcwl3YKRtVXn4wfdOy6M8=,tag:OO5uC8nAjqsWoxC1N801GA==,type:str] + lastmodified: "2026-09-25T00:06:41Z" + mac: ENC[AES256_GCM,data:GfZuouwOTP+vTI2v+YLwpfrR9gNWp7eEpK7Tau/jetn47mReM7JOJmRp02i5mRviPjGIkwK7cAxD9UEDzHCgZ4iVOm6wXgXaVbz3c/ITFlCUEE5UxBy37H5qabjr4EVCTb/HPQYivNPtMIKvPnfIbG9Khkt7h7I9AuIcm7IfANM=,iv:QKok3xgciaLCS0YMZxOxoUW/zsV+gXVpPexvcmoban8=,tag:0eArscx+gmB4GIgigQrZvA==,type:str] unencrypted_suffix: _unencrypted version: 3.12.1 diff --git a/hosts/flex-wg-router/wg.nix b/hosts/flex-wg-router/wg.nix index b454b81..814a48d 100644 --- a/hosts/flex-wg-router/wg.nix +++ b/hosts/flex-wg-router/wg.nix @@ -4,6 +4,6 @@ networking.wg-quick.interfaces = { wg0.configFile = config.sops.secrets.wg0.path; - wg1.configFile = config.sops.secrets.wg1.path; + #wg1.configFile = config.sops.secrets.wg1.path; }; } |