feat(wireguard): add wg-quick VPN client configuration

Connect to home network VPN via vpn.leeworks.dev with wg0 interface
on the 10.0.1.64/28 subnet. Private key loaded from /etc/wireguard/private.key.
This commit is contained in:
2026-04-04 01:53:45 -04:00
parent 014216de6b
commit 1ca8cc8c57
+13
View File
@@ -174,6 +174,19 @@
};
# WireGuard VPN
networking.wg-quick.interfaces.wg0 = {
address = [ "10.0.1.66/28" ];
privateKeyFile = "/etc/wireguard/private.key";
peers = [{
publicKey = "VEpzr/CeGdS6Wsy0NDDfmlB/bCYxS55A155HWGCIIzc=";
endpoint = "vpn.leeworks.dev:51820";
allowedIPs = [ "10.0.1.64/28" ];
persistentKeepalive = 25;
}];
};
services.tailscale = {
enable = true;
useRoutingFeatures = "client"; # or "both" for subnet routing