crony/nix-conf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(tyr): add wireguard.

Browse source
This commit is contained in:
CronyAkatsuki 2025-09-26 01:59:34 +02:00
parent ca9651efb8
commit 6a2f621080
31 changed files with 124 additions and 89 deletions
Download patch file Download diff file Expand all files Collapse all files

17
modules/servers/tyr/wireguard.nix Normal file
View file

@ -0,0 +1,17 @@
{config, ...}: {
networking = {
nat = {
enable = true;
enableIPv6 = true;
externalInterface = "enp1s0";
internalInterfaces = ["wg0"];
};
firewall = {
allowedTCPPorts = [53];
allowedUDPPorts = [53 51820];
};
wg-quick.interfaces.wg0.configFile = "${config.age.secrets.wg-tyr.path}";
};
boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
}