diff options
| -rw-r--r-- | hosts/poweredge-pro/networking.nix | 8 | ||||
| -rw-r--r-- | hosts/poweredge-pro/resources/secrets/wg.yaml | 16 |
2 files changed, 22 insertions, 2 deletions
diff --git a/hosts/poweredge-pro/networking.nix b/hosts/poweredge-pro/networking.nix index 1debc03..e33d971 100644 --- a/hosts/poweredge-pro/networking.nix +++ b/hosts/poweredge-pro/networking.nix @@ -1,4 +1,4 @@ -{ +{ config, ... }: { networking = { useDHCP = false; # Label lan and wan interfaces @@ -27,6 +27,10 @@ nameservers = [ "192.168.77.1" ]; # Firewall for vms firewall.interfaces.mgmt0.allowedTCPPorts = [ 5900 5901 ]; - + }; + # Wireguard + sops.secrets.wg-home.sopsFile = ./resources/secrets/wg.yaml; + networking.wg-quick.interfaces = { + wg-home.configFile = config.sops.secrets.wg-home.path; }; } diff --git a/hosts/poweredge-pro/resources/secrets/wg.yaml b/hosts/poweredge-pro/resources/secrets/wg.yaml new file mode 100644 index 0000000..b0ba1a9 --- /dev/null +++ b/hosts/poweredge-pro/resources/secrets/wg.yaml @@ -0,0 +1,16 @@ +wg-home: ENC[AES256_GCM,data:W/IPTedkrjtzy0nTZnvXJCZ4mjrv8CPcBALM2OAOyUmmWrlukfUB/8gpna25+At4czAjD9ylrhsmOxkW48vqqhytndTeI9TuLJW3r/Q/+NnrOnCiwQez1dHoD88pUG2HsWrBlBcQha0ZaaD8O6ypm/l5GOVioeU2SG9qIft6NBbIqOpFTuGOGMci1JJvcmCwefqgOAT6GFEpicKNEFKDDi3kQKFc+HgPAy3RaBeS1WtwTAk7yhqPiHJJCNzCrxdcuhxsT6kgD1dUA/w0CIAF0AdrkPhMhZcOYrPlfWH7jzqS+d6wiPPL/8RqewWlke9Tey+qIuok786j3dblcahprvzhIdVLEu7OBgKw/Es6zY56fM2GxdwFVLunbWfBBv4GJZgvn+ONHkretD1RS7hHh/Bi0ISBnd/CyATGvdBYj+7NuKwy2OFUPBVEZcs/QM3q,iv:2647jkTuAyFM8kYKu15+/MqsfFwOyWw826K3F/dRaDc=,tag:K3pXngyGxlCLg7nhIxbTPw==,type:str] +sops: + age: + - enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1cTlCUUZXemlXcmdCRE1i + ZEJEWmQ0UTZhak5UOEJwVTBlWTBZYjhkZ2dRCnR4ZUxyWjZoTlNTZlZvdE9sYm4z + dFdjR2V4L1UvK3pIdXNrQ3hMNzkwY0UKLS0tIGk0MjI2TjZ1OTBKbkNmUkxKMS9Q + VURnbTlINk1iWUVLeW5xanphYmVRRVkKZJs5LfPefGBrxHePMgmxEOuWvSyKEKZe + J3yHHiwQnvEj45QFYnir7bEUmC4j1/XOQQVDWaAiRcPfsMnr/eEsrg== + -----END AGE ENCRYPTED FILE----- + recipient: age1q8l3g3t6qjhsmz0gju0n535pz45d2c9crla8jcd5ftjlqe4fs3eqfqay0k + lastmodified: "2026-10-09T22:11:10Z" + mac: ENC[AES256_GCM,data:8AJBQU6Kl+0497Qi8wY93O3mycES7+hvagIEgpMUmkm5GPwMpHH3l0HYHPQzHoRd9lbanl88xbgiWw1xwjDCMrqNVCukKzU7ekZG/IMmQzzl4sFYX7JVtiQKM0vqCtz5igXthXlu5WkSBFF4uYOghcKsceQKkqLdjiPZnSsObWg=,iv:dmbq4q+0raE7TGfYYG2WEnKQm3KIvDHt8bhl4SYbR7U=,tag:98Y2GenJmPui4Z4UxM34rw==,type:str] + unencrypted_suffix: _unencrypted + version: 3.13.3 |