diff options
Diffstat (limited to 'hosts')
| -rw-r--r-- | hosts/ganymede/config.nix | 22 | ||||
| -rw-r--r-- | hosts/ganymede/ganymede-wg-key.age | 5 | ||||
| -rw-r--r-- | hosts/jupiter/config.nix | 21 | ||||
| -rw-r--r-- | hosts/jupiter/jupiter-wg-key.age | 5 | ||||
| -rw-r--r-- | hosts/mercury/config.nix | 21 | ||||
| -rw-r--r-- | hosts/mercury/mercury-wg-key.age | 6 |
6 files changed, 78 insertions, 2 deletions
diff --git a/hosts/ganymede/config.nix b/hosts/ganymede/config.nix index 0d3f15e..f6b3b74 100644 --- a/hosts/ganymede/config.nix +++ b/hosts/ganymede/config.nix @@ -9,8 +9,30 @@ in { file = ./williams-psk.age; owner = "wpa_supplicant"; }; + "caddy-env".file = ./caddy-env.age; "tsnsrv-authkey".file = ./tsnsrv-authkey.age; + + "wg-key".file = ./ganymede-wg-key.age; + }; + + wireguard = { + enable = true; + ip = "100.100.0.1"; + gateway = "100.100.0.1"; + privateKeyFile = config.collinux.secrets."wg-key".path; + peers = [ + { + # mercury + publicKey = "EDDppGqbLfEwEcHLP3J+bxKVGW16fAcU83K/ZKR2h3A="; + ip = "100.100.0.5/32"; + } + { + # jupiter + publicKey = "Pi1PydaaEz9IcAZ+elH5HkzEa2D35P/tUy+9KKH6PHI="; + ip = "100.100.0.10/32"; + } + ]; }; terminal = { diff --git a/hosts/ganymede/ganymede-wg-key.age b/hosts/ganymede/ganymede-wg-key.age new file mode 100644 index 0000000..2ef8256 --- /dev/null +++ b/hosts/ganymede/ganymede-wg-key.age @@ -0,0 +1,5 @@ +age-encryption.org/v1 +-> ssh-ed25519 Jg4yWQ PMAfdBRZ9mLnral4UdHEtr3QWmk8j9lKek6XH8L6QCk +B342qgV/kGHvIt3hm8Yyd0yw7nHJ1kqV3UGLREhWbKA +--- mOBS3t1P5ZAIV8llDldbGC+F855Xy3Jd5V8tVrwisig +L\đg5w\̃9 A:=
bLnOc"<JO;wJ[ .*/ 0
\ No newline at end of file diff --git a/hosts/jupiter/config.nix b/hosts/jupiter/config.nix index decaa61..806785e 100644 --- a/hosts/jupiter/config.nix +++ b/hosts/jupiter/config.nix @@ -1,9 +1,28 @@ -{ +{config, ...}: { collinux = { theme = "adwaita"; user.name = "collin"; + secrets = { + "wg-key".file = ./jupiter-wg-key.age; + }; + + wireguard = { + enable = true; + ip = "100.100.0.10"; + gateway = "100.100.0.1"; + privateKeyFile = config.collinux.secrets."wg-key".path; + peers = [ + { + # ganymede + publicKey = "WNLf8M6JGSHeRVvbAF6E/6oxAHeNxv6bXqqlmwMdvlk="; + ip = "100.100.0.0/24"; + endpoint = "williamsfam.us.com:51820"; + } + ]; + }; + desktop = { gnome.enable = true; gdm.enable = true; diff --git a/hosts/jupiter/jupiter-wg-key.age b/hosts/jupiter/jupiter-wg-key.age new file mode 100644 index 0000000..1c8bab8 --- /dev/null +++ b/hosts/jupiter/jupiter-wg-key.age @@ -0,0 +1,5 @@ +age-encryption.org/v1 +-> ssh-ed25519 cIV9vQ WnCpZXPYLOuQkCmFuWfbcZloVPGcQN/2qMyd0Mg0hGE +oDN7vnXNXaDSIKXPa65Y0EvkOLv5W4IbEYOmGuGh2Ik +--- kfOs0NCAbxF4jFiHbBMgXQEjpsdz6e0blKH38NLFJBw +|Ra)F*jGk[#,ۚRN7oTw\JM &Dxn-`P]rz
\ No newline at end of file diff --git a/hosts/mercury/config.nix b/hosts/mercury/config.nix index e9c7d9e..f996be9 100644 --- a/hosts/mercury/config.nix +++ b/hosts/mercury/config.nix @@ -1,8 +1,27 @@ -{ +{config, ...}: { collinux = { theme = "catppuccin"; user.name = "collin"; + secrets = { + "wg-key".file = ./mercury-wg-key.age; + }; + + wireguard = { + enable = true; + ip = "100.100.0.5"; + gateway = "100.100.0.1"; + privateKeyFile = config.collinux.secrets."wg-key".path; + peers = [ + { + # ganymede + publicKey = "WNLf8M6JGSHeRVvbAF6E/6oxAHeNxv6bXqqlmwMdvlk="; + ip = "100.100.0.0/24"; + endpoint = "williamsfam.us.com:51820"; + } + ]; + }; + desktop = { wallpaper = ./wallpapers/abstract-swirls.jpg; gtk.enable = true; diff --git a/hosts/mercury/mercury-wg-key.age b/hosts/mercury/mercury-wg-key.age new file mode 100644 index 0000000..397f99c --- /dev/null +++ b/hosts/mercury/mercury-wg-key.age @@ -0,0 +1,6 @@ +age-encryption.org/v1 +-> ssh-ed25519 azBilg t589gal+hWbEiNH9vFQFb94UU2ElhLUwBpSg+6516wg +ZmRj3LLDctDPpDKGg3HvI4r7Ex6Sf0ERcPJlqUJXv0w +--- IpOHjk3TkNRT8aW1ocgCie/ljv/sWWFRuaYGhxlf948 +0:,̅;ǛTɿ NRAkllD:5%{.Й +V8Ƀ8nBR
\ No newline at end of file |