daniel/dotfiles
1
0
Fork 0
Code Activity Actions

Updates

Browse source
This commit is contained in:
Daniel Kempkens 2024-01-26 09:58:48 +01:00
parent d3bd9f7c1e
commit b0fa9f7915
Signed by: daniel
SSH key fingerprint: SHA256:Ks/MyhQYcPRQiwMKLAKquWCdCPe3JXlb1WttgnAoSeM
4 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
agenix/hosts/mediaserver/wireguard/config.age
View file

Binary file not shown.

BIN
secret/hosts/Styx.nix
View file

Binary file not shown.

BIN
secret/hosts/mediaserver.nix
View file

Binary file not shown.

8
system/nixos/wireguard-netns.nix
View file

@ -6,7 +6,8 @@
environment.etc."netns/wg/resolv.conf" = { environment.etc."netns/wg/resolv.conf" = {
mode = "0644"; mode = "0644";
text = '' text = ''
nameserver ${secret.wireguard.dns} nameserver ${secret.wireguard.dnsv4}
nameserver ${secret.wireguard.dnsv6}
''; '';
}; };
@ -44,6 +45,11 @@
wants = [ "network-online.target" ]; wants = [ "network-online.target" ];
after = [ "netns@wg.service" "network-online.target" "run-agenix.d.mount" ]; after = [ "netns@wg.service" "network-online.target" "run-agenix.d.mount" ];
environment.WG_ENDPOINT_RESOLUTION_RETRIES = "infinity"; environment.WG_ENDPOINT_RESOLUTION_RETRIES = "infinity";
restartTriggers = [
"${config.age.secrets.wireguard-config.file}"
];
serviceConfig = { serviceConfig = {
Type = "oneshot"; Type = "oneshot";
RemainAfterExit = true; RemainAfterExit = true;