feat(wireguard): update wg0 config to match ClusterVPN-Nixos.conf
- Address: 10.0.1.66/28 -> 10.0.1.67/32 - Add DNS 10.0.1.65 - AllowedIPs: restricted subnets -> 0.0.0.0/0 (full tunnel)
This commit is contained in:
+3
-2
@@ -176,13 +176,14 @@
|
|||||||
|
|
||||||
# WireGuard VPN
|
# WireGuard VPN
|
||||||
networking.wg-quick.interfaces.wg0 = {
|
networking.wg-quick.interfaces.wg0 = {
|
||||||
address = [ "10.0.1.66/28" ];
|
address = [ "10.0.1.67/32" ];
|
||||||
|
dns = [ "10.0.1.65" ];
|
||||||
privateKeyFile = "/etc/wireguard/private.key";
|
privateKeyFile = "/etc/wireguard/private.key";
|
||||||
|
|
||||||
peers = [{
|
peers = [{
|
||||||
publicKey = "VEpzr/CeGdS6Wsy0NDDfmlB/bCYxS55A155HWGCIIzc=";
|
publicKey = "VEpzr/CeGdS6Wsy0NDDfmlB/bCYxS55A155HWGCIIzc=";
|
||||||
endpoint = "vpn.leeworks.dev:51820";
|
endpoint = "vpn.leeworks.dev:51820";
|
||||||
allowedIPs = [ "192.168.1.0/24" "10.0.0.0/24" "10.0.1.0/26" ];
|
allowedIPs = [ "0.0.0.0/0" ];
|
||||||
persistentKeepalive = 25;
|
persistentKeepalive = 25;
|
||||||
}];
|
}];
|
||||||
};
|
};
|
||||||
|
|||||||
Reference in New Issue
Block a user