From a4067140b2dfcd306f13dc51df1abea25ce90500 Mon Sep 17 00:00:00 2001
From: Natasha Moongrave <natasha@256phi.eu>
Date: Sun, 28 Jun 2026 12:46:13 +0200
Subject: Added wireguard configuration to herra's network config

---
 hosts/herra/network.nix | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

(limited to 'hosts')

diff --git a/hosts/herra/network.nix b/hosts/herra/network.nix
index eba91ed..06b68ad 100644
--- a/hosts/herra/network.nix
+++ b/hosts/herra/network.nix
@@ -3,4 +3,27 @@
     libimobiledevice
   ];
   services.usbmuxd.enable = true;
+
+  networking.wg-quick.interfaces.wg0 = {
+    address = [
+      "10.9.8.5/32"
+      "fd42:42:42::5/128"
+    ];
+
+    privateKeyFile = "/run/secrets/wg.key";
+
+    dns = ["1.1.1.1"];
+
+    peers = [
+      {
+        publicKey = "RflmIMDsWE+APNhVIxlziY9QAfHGLq3k2xQptTFSAWs=";
+        presharedKeyFile = "/run/secrets/wg.psk";
+        endpoint = "89.24.133.226:19100";
+        allowedIPs = [
+          "0.0.0.0/0"
+          "::/0"
+        ];
+      }
+    ];
+  };
 }
-- 
cgit v1.2.3