peprolinbot/frues-clan
1
0
Fork 0
Code Issues Pull requests 1 Wiki Activity Actions

Add wg-access-server

Browse source
This commit is contained in:
Pedro Rey Anca 2025-08-29 16:43:36 +02:00
parent 0ebf24af44
commit b614dcf1ec
Signed by: peprolinbot
GPG key ID: 053EA6E00116533A
3 changed files with 45 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

33
machines/aresix/modules/wireguard.nix Normal file
View file

@ -0,0 +1,33 @@
{config, ...}: {
clan.core.vars.generators.wg-access-server = {
prompts.admin-password = {
description = "Password for the wg-access-server admin user";
type = "hidden";
};
prompts.wireguard-private-key = {
description = "Wireguard private key wg-access-server will use";
type = "hidden";
};
files.secrets-file.secret = true;
script = ''
cat <<EOL > $out/secrets-file
adminPassword: $(<$prompts/admin-password)
wireguard:
privateKey: $(<$prompts/wireguard-private-key)
EOL
'';
};
services.wg-access-server = {
enable = true;
settings = {
httpHost = "::1";
};
secretsFile = config.clan.core.vars.generators.wg-access-server.files.secrets-file.path;
};
networking.firewall.allowedUDPPorts = [51820 53];
}