asxpi/nixOS
asxpi/nixOS
1
0
Fork 0
Code Issues Pull requests Activity

wireguard: wg0/wg2 configs from sops

Browse source
This commit is contained in:
Sergei Poljanski 2026-07-14 12:24:33 +04:00
commit 45d23c5875
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
1 changed files with 15 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

17
modules/wireguard.nix
View file

@ -6,14 +6,27 @@
wireguard-tools
];
sops.secrets = {
"wg0.conf" = {
sopsFile = "/etc/nixos/secrets/wg0.conf";
format = "binary";
restartUnits = [ "wg-quick-wg0.service" ];
};
"wg2.conf" = {
sopsFile = "/etc/nixos/secrets/wg2.conf";
format = "binary";
restartUnits = [ "wg-quick-wg2.service" ];
};
};
# WireGuard interface
networking.wg-quick.interfaces = {
wg0 = {
configFile = "/etc/wireguard/wg0.conf"; # TODO: Secret Manager. TODO: Add SSH, GPG as well to secret manager
configFile = config.sops.secrets."wg0.conf".path;
autostart = true;
};
wg2 = {
configFile = "/etc/wireguard/wg2.conf";
configFile = config.sops.secrets."wg2.conf".path;
autostart = true;
};
};