WIP: router: wireguard: finalize wg0 config for now

2025-06-03 19:46:38 -07:00 · 2025-06-03 19:27:35 -07:00 · 2025-06-03 19:18:35 -07:00 · 2025-06-02 00:29:17 -07:00 · 2025-06-01 20:44:56 -07:00 · 2025-06-01 20:44:56 -07:00
3 changed files with 6 additions and 15 deletions
--- a/hosts/router/firewall.nix
+++ b/hosts/router/firewall.nix
@@ -47,15 +47,7 @@ in
      map port_forward {
          type inet_proto . inet_service : ipv4_addr . inet_service
          elements = {
-              tcp . 8006 : ${ifs.lan50.p4}.10 . 8006,
-              # opnsense vpn endpoints
-              # the plan is to maybe eventually move these to nixos
-              udp . 18596 : ${vars.extra.opnsense.addr4} . 18596,
-              udp . 48512 : ${vars.extra.opnsense.addr4} . 48512,
-              udp . 40993 : ${vars.extra.opnsense.addr4} . 40993,
-              udp . 45608 : ${vars.extra.opnsense.addr4} . 45608,
-              udp . 35848 : ${vars.extra.opnsense.addr4} . 35848,
-              udp . 48425 : ${vars.extra.opnsense.addr4} . 48425,
+              tcp . 8006 : ${ifs.lan50.p4}.10 . 8006
          }
      }

--- a/hosts/router/private.nix
+++ b/hosts/router/private.nix
@@ -1,3 +1,2 @@
-U2FsdGVkX1/MGwxIMmhbZuPqJUZzex9v5tTuiOrEvDVldI7xY0edUy9Ii5udFLXt
-AbxShsH43FH1ucgygKDlKTB/yXZWDoDVhjdgLFjaBtAt0xyAL9Doet844oDVhbbO
-FqOwXHMd+PE23rgqiCscsA==
+U2FsdGVkX1/98w32OE1ppwT0I5A3UOTKCLJfvk+TQdrbf0TLfYNZ9TC9n8cH2hC9
+ObKVuFlOLwHlzeBy7MXaLg==
--- a/hosts/router/vars.nix
+++ b/hosts/router/vars.nix
@@ -53,9 +53,9 @@ rec {
  ifs = rec {
    wan = rec {
      name = "wan";
-      addr4 = private.wanAddr4;
-      addr4Sized = "${addr4}/23";
-      gw4 = private.wanGw4;
+      addr4 = "192.168.1.61";
+      addr4Sized = "${addr4}/24";
+      gw4 = "192.168.1.254";
    };
    lan = mkIfConfig {
      name_ = "lan";
Author	SHA1	Message	Date
Yuri Tatishchev	916bd8cf62	WIP: router: wireguard: finalize wg0 config for now	2025-06-03 19:46:38 -07:00
Yuri Tatishchev	e6a9ab8d29	WIP: router: wireguard: finalize wg0 config for now	2025-06-03 19:27:35 -07:00
Yuri Tatishchev	b39b5abb3e	WIP: router: wireguard: finalize wg0 config for now	2025-06-03 19:18:35 -07:00
Yuri Tatishchev	fc4cd6e56f	WIP: router: wireguard: move wg0 to vars.ifs, streamline some things	2025-06-02 00:29:17 -07:00
Yuri Tatishchev	fd1e7b4724	WIP: router: wireguard: change wg0 subnets to not conflict with opnsense	2025-06-01 20:44:56 -07:00
Yuri Tatishchev	378d3a53b3	WIP: router: wireguard: slighly more successful conversion of peers to attrset	2025-06-01 20:44:56 -07:00
Yuri Tatishchev	38ece9125b	WIP: router: wireguard: someone forgot to add the network config for the wireguard interface	2025-06-01 20:44:55 -07:00
Yuri Tatishchev	1c0871f54e	WIP: router: wireguard: attempt to convert wg0Peers from list to attrset (gone not well)	2025-06-01 20:44:54 -07:00
Yuri Tatishchev	4641775e54	router: firewall: add wireguard interface to lan zone (stupidity moment)	2025-06-01 20:44:54 -07:00
Yuri Tatishchev	3fb966c728	router: firewall: allow ssh, wireguard input globally	2025-06-01 20:44:53 -07:00
Yuri Tatishchev	67e1a6ef2f	router: firewall: add entries for wireguard	2025-06-01 20:44:53 -07:00
Yuri Tatishchev	5e19bc16f5	router: wireguard: add wg0 interface with some peers for testing	2025-06-01 20:44:46 -07:00