From 55d12269daddc3648eae5d236756059191834431 Mon Sep 17 00:00:00 2001
From: Collin Williams <96917990+bluedragon1221@users.noreply.github.com>
Date: Mon, 19 Jan 2026 07:44:46 -0600
Subject: initial wireguard setup

---
 modules/wireguard/nixos/default.nix | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

(limited to 'modules/wireguard/nixos')

diff --git a/modules/wireguard/nixos/default.nix b/modules/wireguard/nixos/default.nix
index 6f51ddf..ada218a 100644
--- a/modules/wireguard/nixos/default.nix
+++ b/modules/wireguard/nixos/default.nix
@@ -6,11 +6,10 @@
   cfg = config.collinux.wireguard;
 in
   lib.mkIf cfg.enable {
-    boot.extraModulePackages = [config.boot.kernelPackages.wireguard];
-    boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
-
     networking.useNetworkd = true;
     systemd.network = {
+      enable = true;
+
       netdevs."10-wg" = {
         netdevConfig = {
           Kind = "wireguard";
@@ -23,12 +22,13 @@ in
         };
 
         wireguardPeers =
-          builtins.map (m: {
+          cfg.peers
+          |> builtins.mapAttrs (_: m: {
             PublicKey = m.publicKey;
             AllowedIPs = [m.ip];
             Endpoint = m.endpoint;
           })
-          cfg.peers;
+          |> builtins.attrValues;
       };
 
       networks."12-wireguard" = {
@@ -39,8 +39,6 @@ in
           DHCP = "no";
           Gateway = cfg.gateway;
 
-          IPMasquerade = "ipv4";
-          IPv4Forwarding = true;
           IPv6AcceptRA = false;
         };
       };
-- 
cgit v1.3.1