From ed2550a41c8429a1d2fe897deb878717c2ebc3d1 Mon Sep 17 00:00:00 2001
From: Collin Williams <96917990+bluedragon1221@users.noreply.github.com>
Date: Sun, 18 Jan 2026 08:07:27 -0600
Subject: initial wireguard configuration

---
 hosts/ganymede/config.nix          | 21 ++++++++++++++++++++
 hosts/ganymede/ganymede-wg-key.age |  5 +++++
 hosts/jupiter/config.nix           | 21 +++++++++++++++++++-
 hosts/jupiter/jupiter-wg-key.age   |  5 +++++
 hosts/mercury/config.nix           | 26 ++++++++++++++++++++-----
 hosts/mercury/mercury-wg-key.age   |  6 ++++++
 hosts/wg_peers.nix                 | 39 --------------------------------------
 7 files changed, 78 insertions(+), 45 deletions(-)
 create mode 100644 hosts/ganymede/ganymede-wg-key.age
 create mode 100644 hosts/jupiter/jupiter-wg-key.age
 create mode 100644 hosts/mercury/mercury-wg-key.age
 delete mode 100644 hosts/wg_peers.nix

(limited to 'hosts')

diff --git a/hosts/ganymede/config.nix b/hosts/ganymede/config.nix
index 50ef29a..297d7c6 100644
--- a/hosts/ganymede/config.nix
+++ b/hosts/ganymede/config.nix
@@ -5,6 +5,27 @@
     secrets = {
       "williams-psk".file = ./williams-psk.age;
       "caddy-env".file = ./caddy-env.age;
+
+      "wg-key".file = ./ganymede-wg-key.age;
+    };
+
+    wireguard = {
+      enable = true;
+      ip = "100.100.0.1";
+      gateway = "100.100.0.1";
+      privateKeyFile = config.collinux.secrets."wg-key".path;
+      peers = [
+        {
+          # mercury
+          publicKey = "EDDppGqbLfEwEcHLP3J+bxKVGW16fAcU83K/ZKR2h3A=";
+          ip = "100.100.0.5/32";
+        }
+        {
+          # jupiter
+          publicKey = "Pi1PydaaEz9IcAZ+elH5HkzEa2D35P/tUy+9KKH6PHI=";
+          ip = "100.100.0.10/32";
+        }
+      ];
     };
 
     terminal = {
diff --git a/hosts/ganymede/ganymede-wg-key.age b/hosts/ganymede/ganymede-wg-key.age
new file mode 100644
index 0000000..2ef8256
--- /dev/null
+++ b/hosts/ganymede/ganymede-wg-key.age
@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 Jg4yWQ PMAfdBRZ9mLnral4UdHEtr3QWmk8j9lKek6XH8L6QCk
+B342qgV/kGHvIt3hm8Yyd0yw7nHJ1kqV3UGLREhWbKA
+--- mOBS3t1P5ZAIV8llDldbGC+F855Xy3Jd5V8tVrwisig
+��L\đ��g5���w��\̃�9	A:=
bL����n�O������c�"��<�J��O;wJ�[���.*��/��	0��
\ No newline at end of file
diff --git a/hosts/jupiter/config.nix b/hosts/jupiter/config.nix
index a0c1583..cd4df81 100644
--- a/hosts/jupiter/config.nix
+++ b/hosts/jupiter/config.nix
@@ -1,9 +1,28 @@
-{
+{config, ...}: {
   collinux = {
     theme = "adwaita";
 
     user.name = "collin";
 
+    secrets = {
+      "wg-key".file = ./jupiter-wg-key.age;
+    };
+
+    wireguard = {
+      enable = true;
+      ip = "100.100.0.10";
+      gateway = "100.100.0.1";
+      privateKeyFile = config.collinux.secrets."wg-key".path;
+      peers = [
+        {
+          # ganymede
+          publicKey = "WNLf8M6JGSHeRVvbAF6E/6oxAHeNxv6bXqqlmwMdvlk=";
+          ip = "100.100.0.0/24";
+          endpoint = "williamsfam.us.com:51820";
+        }
+      ];
+    };
+
     desktop = {
       gnome.enable = true;
       gdm.enable = true;
diff --git a/hosts/jupiter/jupiter-wg-key.age b/hosts/jupiter/jupiter-wg-key.age
new file mode 100644
index 0000000..1c8bab8
--- /dev/null
+++ b/hosts/jupiter/jupiter-wg-key.age
@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 cIV9vQ WnCpZXPYLOuQkCmFuWfbcZloVPGcQN/2qMyd0Mg0hGE
+oDN7vnXNXaDSIKXPa65Y0EvkOLv5W4IbEYOmGuGh2Ik
+--- kfOs0NCAbxF4jFiHbBMgXQEjpsdz6e0blKH38NLFJBw
+�|Ra)F���*���j�G�k[�#�����,ۚRN�7o�Tw�“\��JM��&��D�x���n�-�`�P]��rz
\ No newline at end of file
diff --git a/hosts/mercury/config.nix b/hosts/mercury/config.nix
index 9ee29d0..590698a 100644
--- a/hosts/mercury/config.nix
+++ b/hosts/mercury/config.nix
@@ -1,18 +1,34 @@
-{pkgs, ...}: {
+{config, ...}: {
   collinux = {
     theme = "catppuccin";
     user.name = "collin";
 
+    secrets = {
+      "wg-key".file = ./mercury-wg-key.age;
+    };
+
+    wireguard = {
+      enable = true;
+      ip = "100.100.0.5";
+      gateway = "100.100.0.1";
+      privateKeyFile = config.collinux.secrets."wg-key".path;
+      peers = [
+        {
+          # ganymede
+          publicKey = "WNLf8M6JGSHeRVvbAF6E/6oxAHeNxv6bXqqlmwMdvlk=";
+          ip = "100.100.0.0/24";
+          endpoint = "williamsfam.us.com:51820";
+        }
+      ];
+    };
+
     desktop = {
       wallpaper = ./wallpaper.jpg;
 
-      # gtk.enable = true;
-
       greetd.enable = true;
 
       wm = {
-        # sway.enable = true;
-        niri.enable = true;
+        sway.enable = true;
         components.fuzzel.enable = true;
         components.dunst.enable = true;
       };
diff --git a/hosts/mercury/mercury-wg-key.age b/hosts/mercury/mercury-wg-key.age
new file mode 100644
index 0000000..397f99c
--- /dev/null
+++ b/hosts/mercury/mercury-wg-key.age
@@ -0,0 +1,6 @@
+age-encryption.org/v1
+-> ssh-ed25519 azBilg t589gal+hWbEiNH9vFQFb94UU2ElhLUwBpSg+6516wg
+ZmRj3LLDctDPpDKGg3HvI4r7Ex6Sf0ERcPJlqUJXv0w
+--- IpOHjk3TkNRT8aW1ocgCie/ljv/sWWFRuaYGhxlf948
+0��:��,̅��������;ǛTɿ��NR���Akll�
D�����:�5%�{���.��
+V8��Ƀ�8nBR��
\ No newline at end of file
diff --git a/hosts/wg_peers.nix b/hosts/wg_peers.nix
deleted file mode 100644
index 36fb465..0000000
--- a/hosts/wg_peers.nix
+++ /dev/null
@@ -1,39 +0,0 @@
-{
-  "ganymede" = {
-    hub = {
-      domain = "williamsfam.us.com";
-      port = 51823;
-
-      ip_addr = "100.100.0.2";
-      key = "";
-    };
-  };
-
-  "mercury" = {
-    spoke = {
-      ip_addr = "100.100.0.5";
-      key = "";
-    };
-  };
-
-  "jupiter" = {
-    spoke = {
-      ip_addr = "100.100.0.10";
-      key = "";
-    };
-  };
-
-  "terra" = {
-    spoke = {
-      ip_addr = "100.100.0.24";
-      key = "";
-    };
-  };
-
-  "uranus" = {
-    spoke = {
-      ip_addr = "100.100.0.45";
-      key = "";
-    };
-  };
-}
-- 
cgit v1.3.1