jeff/nixos-kubernetes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix up wireguard config

Browse source
This commit is contained in:
Jeffrey C. Ollie 2024-12-11 14:07:01 -06:00
parent 89a5f8cdc6
commit 01e2da2383
Signed by: jeff
GPG key ID: 6F86035A6D97044E
1 changed files with 9 additions and 11 deletions

20
flake.nix
View file

@ -639,17 +639,15 @@
map
(
n: {
wireguardPeerConfig = {
PublicKey = cfg.hosts.${n}.public_key;
Endpoint = "${cfg.hosts.${n}.endpoint.address}:${toString cfg.hosts.${n}.endpoint.port}";
AllowedIPs = [
cfg.service_subnet
cfg.pod_subnet
cfg.hosts.${n}.wireguard_subnet.address
"${cfg.hosts.${n}.pod_subnet.address}/${toString cfg.hosts.${n}.pod_subnet.mask}"
];
PersistentKeepalive = 25;
};
PublicKey = cfg.hosts.${n}.public_key;
Endpoint = "${cfg.hosts.${n}.endpoint.address}:${toString cfg.hosts.${n}.endpoint.port}";
AllowedIPs = [
cfg.service_subnet
cfg.pod_subnet
cfg.hosts.${n}.wireguard_subnet.address
"${cfg.hosts.${n}.pod_subnet.address}/${toString cfg.hosts.${n}.pod_subnet.mask}"
];
PersistentKeepalive = 25;
}
)
(