From c303524a359d2be84d825acebbf8d7e2ddd8f24a Mon Sep 17 00:00:00 2001
From: Collin Williams <96917990+bluedragon1221@users.noreply.github.com>
Date: Fri, 27 Feb 2026 07:57:56 -0600
Subject: refactor network config, add wireguard connection to vps

---
 hosts/ganymede/nixos.nix | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

(limited to 'hosts/ganymede/nixos.nix')

diff --git a/hosts/ganymede/nixos.nix b/hosts/ganymede/nixos.nix
index be59083..8b5cbf4 100644
--- a/hosts/ganymede/nixos.nix
+++ b/hosts/ganymede/nixos.nix
@@ -30,6 +30,33 @@
     wantedBy = ["default.target"];
   };
 
+  # VPN to server
+  systemd.network = {
+    netdevs."10-wg0" = {
+      netdevConfig = {
+        Kind = "wireguard";
+        Name = "wg0";
+      };
+      wireguardConfig = {
+        PrivateKeyFile = config.collinux.secrets."wireguard-pk".path;
+        ListenPort = 51820;
+      };
+      wireguardPeers = [
+        {
+          PublicKey = "seOq75FUGb+KThvOXCEAGdabWbb+jTRUntITpuAPgWA=";
+          AllowedIPs = "0.0.0.0/0";
+          PersistentKeepalive = 25;
+        }
+      ];
+    };
+    networks."wg0" = {
+      matchConfig.Name = "wg0";
+      address = ["10.100.0.2/24"];
+      DHCP = "no";
+      networkConfig.IPv6AcceptRA = false;
+    };
+  };
+
   services.fail2ban.enable = true;
 
   # merge logs from subdomains
-- 
cgit v1.3.1