Create wireguard.nix

1 files changed, 23 insertions, 0 deletions

diff --git a/nixos/hosts/bin/components/wireguard.nix b/nixos/hosts/bin/components/wireguard.nix
new file mode 100644
index 0000000..03371bc
--- /dev/null
+++ b/nixos/hosts/bin/components/wireguard.nix
@@ -0,0 +1,23 @@
+{
+  networking.firewall.allowedUDPPorts = [ 51820 ];
+  networking.firewall.trustedInterfaces = [ "wg0" ];
+  
+  networking.wireguard.interfaces.wg0 = {
+    ips = [ "10.0.0.1/24" ];
+    listenPort = 51820;
+    privateKeyFile = "/var/lib/wireguard/privatekey";
+
+    peers = [
+      # PC
+      {
+        publicKey = "BdQ1JoAFU5XGFfZDNPEUk78zI8yLLReSWdVbeETwNX4=";
+        allowedIPs = [ "10.0.0.2/32" ];
+      }
+      # Laptop
+      {
+        publicKey = " ";
+        allowedIPs = [ "10.0.0.3/32" ];
+      }
+    ];
+  };
+}