yanlin/nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix wireguard config syntax

Browse source
This commit is contained in:
Yan Lin 2025-09-10 19:00:54 +02:00
parent d0084adcc9
commit 9b0c68540e
1 changed files with 41 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

26
modules/wireguard.nix
View file

@ -131,12 +131,18 @@ in
'';
};
# Server configuration
networking.wg-quick.interfaces = mkIf (cfg.mode == "server") {
${cfg.interface} = {
# WireGuard interface configuration (combined server and client)
networking.wg-quick.interfaces = {
${cfg.interface} = mkMerge [
# Common configuration
{
privateKeyFile = cfg.privateKeyFile;
}
# Server-specific configuration
(mkIf (cfg.mode == "server") {
address = [ cfg.serverConfig.address ];
listenPort = cfg.listenPort;
privateKeyFile = cfg.privateKeyFile;
# Enable IP forwarding and NAT for server
preUp = ''
@ -155,14 +161,11 @@ in
publicKey = peer.publicKey;
allowedIPs = peer.allowedIPs;
}) cfg.serverConfig.peers;
};
};
})
# Client configuration
networking.wg-quick.interfaces = mkIf (cfg.mode == "client") {
${cfg.interface} = {
# Client-specific configuration
(mkIf (cfg.mode == "client") {
address = [ cfg.clientConfig.address ];
privateKeyFile = cfg.privateKeyFile;
peers = [{
publicKey = cfg.clientConfig.serverPublicKey;
@ -170,7 +173,8 @@ in
endpoint = cfg.clientConfig.serverEndpoint;
persistentKeepalive = 25;
}];
};
})
];
};
# Firewall configuration