diff options
| author | Karel Kočí <cynerd@email.cz> | 2024-03-24 19:05:39 +0100 |
|---|---|---|
| committer | Karel Kočí <cynerd@email.cz> | 2024-03-24 19:05:39 +0100 |
| commit | e84e6dcf117080eaf7658b25fb20a9dc3b5d1cfe (patch) | |
| tree | 55422d1fc9370dc331fa63125a2df5597310c452 /nixos/configurations/lipwig.nix | |
| parent | 6c16e4133582def100c39b17369e46906a6d3337 (diff) | |
| download | nixos-personal-e84e6dcf117080eaf7658b25fb20a9dc3b5d1cfe.tar.gz nixos-personal-e84e6dcf117080eaf7658b25fb20a9dc3b5d1cfe.tar.bz2 nixos-personal-e84e6dcf117080eaf7658b25fb20a9dc3b5d1cfe.zip | |
Add wireguard and more updates
Diffstat (limited to 'nixos/configurations/lipwig.nix')
| -rw-r--r-- | nixos/configurations/lipwig.nix | 18 |
1 files changed, 15 insertions, 3 deletions
diff --git a/nixos/configurations/lipwig.nix b/nixos/configurations/lipwig.nix index c484541..0eefe5f 100644 --- a/nixos/configurations/lipwig.nix +++ b/nixos/configurations/lipwig.nix @@ -19,6 +19,7 @@ enable = false; baseDir = "/nas"; }; + wireguard = true; openvpn.oldpersonal = true; }; @@ -29,10 +30,21 @@ fsType = "nfs"; }; - networking.firewall = { - allowedTCPPorts = [80 443]; - allowedUDPPorts = [1194]; + networking = { + useNetworkd = true; + useDHCP = false; + nftables.enable = true; + firewall = { + allowedTCPPorts = [80 443]; + allowedUDPPorts = [1194]; + filterForward = true; + extraForwardRules = '' + iifname {"wg", "personalvpn"} oifname {"wg", "personalvpn"} accept + ''; + }; }; + systemd.network.wait-online.enable = false; + systemd.services.networking-setup.wantedBy = ["network-online.target"]; # Web ###################################################################### services.nginx = { |