fix: have the user set up wg themselves in the user scope

This commit is contained in:
EinEtwas 2024-10-26 13:35:19 +02:00
parent 23c140a2d1
commit c3a7c5ba9c
Signed by: etwas
SSH key fingerprint: SHA256:bHhIeAdn/2k9jmOs6+u6ox98VYmoHUN3HfnpV2w8Ws0

View file

@ -9,20 +9,4 @@
networking.firewall = { networking.firewall = {
allowedUDPPorts = [ 51820 ]; # Clients and peers can use the same port, see listenport allowedUDPPorts = [ 51820 ]; # Clients and peers can use the same port, see listenport
}; };
networking.wireguard.interfaces."wg0" = {
privateKeyFile = "/run/agenix/fbda-wg-privkey";
ips = [ "192.168.178.201/24" ];
listenPort = 51820;
peers = [
{
publicKey = "wwx1Kns34xmK+UJsF4l89uIZ5oc/m8VA9q7+YPWCbX8=";
presharedKeyFile = "/run/agenix/fbda-wg-psk";
allowedIPs = [ "192.168.178.0/24" "0.0.0.0/0" ];
endpoint = "y92dby3elaoma4gg.myfritz.net:57667";
persistentKeepalive = 25;
}
];
};
} }