hosts/station/network.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

{ config, pkgs, ... }:

{
  networking = {
    hostName = "station"; # Define your hostname.
    
    # Enables wireless support via wpa_supplicant.
    # wireless.enable = true;
    
    # Configure network proxy if necessary
    # proxy.default = "http://user:password@proxy:port/";
    # proxy.noProxy = "127.0.0.1,localhost,internal.domain";

    # Enable networking
    networkmanager.enable = true;

    wireguard = {
      enable = true;

      interfaces = {
        rousi = {
          ips = [
            "10.0.0.5/24"
          ];
          listenPort = 51820;
          privateKeyFile = "/home/aethrvmn/.creds/rousikey";

          peers = [
            {
              allowedIPs = [ 
                "192.168.10.0/24" 
                "172.16.0.0/24"
              ];
              publicKey = "LEeO3Qy6c3W0qoR1xFhl7Fx29Oppq8tKE72HPoA831I=";
              endpoint = "vpn.valatsos.gr:51820";
              persistentKeepalive = 25;
            }
          ];
        };
      };
    };

    # Open ports in the firewall.
    firewall ={
      ## 1313 is HUGO
      ## 2234 is nicotine
      allowedTCPPorts = [ 1313 2234 ];
      ## 51820 is wg
      ## 53317 is localsend
      allowedUDPPorts = [ 51820 53317 ];
    };
    # Or disable the firewall altogether.
    # firewall.enable = false;
  };
}