yanlin/nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

deploy wireguard

Browse source
This commit is contained in:
Yan Lin 2026-02-18 21:38:37 +01:00
parent a47d096503
commit 8bb7ffd92a
6 changed files with 175 additions and 212 deletions
Download patch file Download diff file Expand all files Collapse all files

12
hosts/nixos/vps/system.nix
View file

@ -6,11 +6,11 @@
./containers.nix
./proxy.nix
../system-default.nix
../../../modules/vpn/tailscale.nix
../../../modules/podman.nix
../../../modules/traefik.nix
../../../modules/borg/client.nix
../../../modules/git/server.nix
../../../modules/vpn/server.nix
];
# GRUB bootloader with UEFI support
@ -44,7 +44,6 @@
firewall = {
enable = true;
allowedTCPPorts = [ 22 80 443 27017 ];
trustedInterfaces = [ "tailscale0" ];
};
};
@ -71,7 +70,14 @@
];
};
services.tailscale-custom.exitNode = true;
services.wireguard-server = {
enable = true;
address = "10.2.2.1/24";
peers = [{
publicKey = "<nfss-public-key>";
allowedIPs = [ "10.2.2.10/32" ];
}];
};
services.git-server-custom = {
enable = true;