thehedgehog/nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

prefect: Update wireguard allowed ips

Browse source
This commit is contained in:
The Hedgehog 2022-09-12 12:59:21 -04:00
parent 979cb9ae5b
commit 0bfca01749
Signed by: thehedgehog
GPG key ID: 8CDF3F7CAA53A0F5
1 changed files with 13 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
hosts/prefect/networking.nix
View file

@ -40,12 +40,24 @@
publicKey = "wW5iNQcNa9VphZWicMdc8k7lJbVrXPMtzmWsHBwPqE0=";
persistentKeepalive = 15;
dynamicEndpointRefreshSeconds = 5;
allowedIPs = [ "0.0.0.0/0" ];
allowedIPs = [
"172.20.43.96/27"
"172.20.0.0/24"
"172.21.0.0/24"
"172.22.0.0/24"
"172.23.0.0/24"
"172.20.0.0/14"
"10.100.0.0/14"
"10.127.0.0/16"
"10.0.0.0/8"
"172.31.0.0/16"
];
}
];
postSetup = ''
${pkgs.iproute}/bin/ip addr add 172.20.43.96/32 peer 172.20.43.97/32 dev wg0
${pkgs.iproute}/bin/ip -6 addr add fe80::1/64 peer fe80::2/64 dev wg0
${pkgs.iproute}/bin/ip route del default dev wg0
'';
};
};