62 lines
1.4 KiB
Nix
62 lines
1.4 KiB
Nix
{
|
|
...
|
|
}@attrs:
|
|
{
|
|
networking = {
|
|
hostName = "${attrs.hostname}";
|
|
interfaces.enp5s0 = {
|
|
ipv4.addresses = [
|
|
{
|
|
address = "192.168.0.2";
|
|
prefixLength = 24;
|
|
}
|
|
];
|
|
};
|
|
defaultGateway = {
|
|
address = "192.168.0.254";
|
|
interface = "enp5s0";
|
|
};
|
|
nameservers = [
|
|
"2001:41d0:303:20da::1"
|
|
"217.182.138.218"
|
|
];
|
|
networkmanager.enable = true;
|
|
extraHosts = ''
|
|
#172.18.23.4 dozzle.grandbesancon.fr
|
|
#172.18.22.206 toto.grandbesancon.fr
|
|
#172.18.229.3 sso.grandbesancon.fr
|
|
#172.18.20.37 sso.grandbesancon.fr
|
|
#172.18.20.229 auth.grandbesancon.fr
|
|
#172.18.20.181 traefikauth.grandbesancon.fr
|
|
'';
|
|
wireguard = {
|
|
interfaces = {
|
|
wg0 = {
|
|
ips = [
|
|
"fc00::2/56"
|
|
"10.0.0.2/16"
|
|
];
|
|
listenPort = 51820;
|
|
privateKeyFile = "/etc/wireguard/privatekey";
|
|
peers = [
|
|
{
|
|
publicKey = "X8D/RhwjpFYXm2DbtC0wY39TrFkdaw7RA7kHhbmOXnw=";
|
|
presharedKeyFile = "/etc/wireguard/presharedkey";
|
|
allowedIPs = [
|
|
"fc00::0/56"
|
|
"10.0.0.0/16"
|
|
"10.1.0.0/16"
|
|
];
|
|
endpoint = "[2001:41d0:303:20da::1]:51820";
|
|
persistentKeepalive = 15;
|
|
}
|
|
];
|
|
};
|
|
};
|
|
};
|
|
};
|
|
imports = [
|
|
./openfortivpn.nix
|
|
];
|
|
}
|