caspervk/nixos
1
0
Fork 0
Code Actions Activity

wireguard: explicit ipv4

Browse source
This commit is contained in:
Casper V. Kristensen 2024-09-07 18:49:55 +02:00
parent ead65eb0c0
commit 6ecb02fb45
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
hosts/sigma/network.nix
View file

@ -74,7 +74,9 @@
wireguardPeerConfig = { wireguardPeerConfig = {
PublicKey = "AlphazUR/z+1DRCFSvxTeKPIJnyPQvYsDoSgESvqJhM="; PublicKey = "AlphazUR/z+1DRCFSvxTeKPIJnyPQvYsDoSgESvqJhM=";
PresharedKeyFile = config.age.secrets.wireguard-preshared-key-file.path; PresharedKeyFile = config.age.secrets.wireguard-preshared-key-file.path;
Endpoint = "alpha.caspervk.net:51820"; # Explicit IPv4 address of alpha.caspervk.net to avoid attempting
# to (re)connect through IPv6(??).
Endpoint = "116.203.179.206:51820";
# Keep NAT mappings and stateful firewalls open at the ISP # Keep NAT mappings and stateful firewalls open at the ISP
PersistentKeepalive = 25; PersistentKeepalive = 25;
# AllowedIPs is both an ACL for incoming traffic, as well as a # AllowedIPs is both an ACL for incoming traffic, as well as a
@ -145,7 +147,9 @@
wireguardPeerConfig = { wireguardPeerConfig = {
PublicKey = "AlphazUR/z+1DRCFSvxTeKPIJnyPQvYsDoSgESvqJhM="; PublicKey = "AlphazUR/z+1DRCFSvxTeKPIJnyPQvYsDoSgESvqJhM=";
PresharedKeyFile = config.age.secrets.wireguard-preshared-key-file.path; PresharedKeyFile = config.age.secrets.wireguard-preshared-key-file.path;
Endpoint = "alpha.caspervk.net:51821"; # Explicit IPv4 address of alpha.caspervk.net to avoid attempting
# to (re)connect through IPv6(??).
Endpoint = "116.203.179.206:51821";
PersistentKeepalive = 25; PersistentKeepalive = 25;
AllowedIPs = ["0.0.0.0/0"]; AllowedIPs = ["0.0.0.0/0"];
RouteTable = "wg-sigma-p2p"; RouteTable = "wg-sigma-p2p";