Added wireguard configuration to herra's network config

1 files changed, 23 insertions, 0 deletions

diff --git a/hosts/herra/network.nix b/hosts/herra/network.nix
index eba91ed..06b68ad 100644
--- a/hosts/herra/network.nix
+++ b/hosts/herra/network.nix
@@ -3,4 +3,27 @@
     libimobiledevice
   ];
   services.usbmuxd.enable = true;
+
+  networking.wg-quick.interfaces.wg0 = {
+    address = [
+      "10.9.8.5/32"
+      "fd42:42:42::5/128"
+    ];
+
+    privateKeyFile = "/run/secrets/wg.key";
+
+    dns = ["1.1.1.1"];
+
+    peers = [
+      {
+        publicKey = "RflmIMDsWE+APNhVIxlziY9QAfHGLq3k2xQptTFSAWs=";
+        presharedKeyFile = "/run/secrets/wg.psk";
+        endpoint = "89.24.133.226:19100";
+        allowedIPs = [
+          "0.0.0.0/0"
+          "::/0"
+        ];
+      }
+    ];
+  };
 }