wizzy/home-server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

yay

Browse source
This commit is contained in:
Ellie 2026-02-24 21:44:37 -08:00
parent 753d9a581e
commit ad0c74b801
3 changed files with 14 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
common.nix
View file

@ -24,7 +24,7 @@
PasswordAuthentication = false; PasswordAuthentication = false;
KbdInteractiveAuthentication = false; KbdInteractiveAuthentication = false;
PermitRootLogin = "no"; PermitRootLogin = "no";
AllowUsers = [ "ellie" "forgejo" ]; AllowUsers = [ "ellie" "forgejo" "borg" ];
}; };
extraConfig = '' extraConfig = ''
Match User forgejo Address 10.10.0.1 Match User forgejo Address 10.10.0.1

1
flake.nix
View file

@ -86,7 +86,6 @@
./services/coturn.nix ./services/coturn.nix
./services/wireguard-outer.nix ./services/wireguard-outer.nix
./services/borgbackup-vps.nix ./services/borgbackup-vps.nix
./services/syncthing-relay.nix
]; ];
}; };

13
services/wireguard-outer.nix
View file

@ -1,6 +1,8 @@
{ lib, pkgs, config, ... }: { lib, pkgs, config, ... }:
{ {
boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
sops.secrets."wireguard/private_key" = { sops.secrets."wireguard/private_key" = {
sopsFile = ./secrets/wireguard_vps.yaml; sopsFile = ./secrets/wireguard_vps.yaml;
mode = "0400"; mode = "0400";
@ -21,9 +23,20 @@
peers = [ peers = [
{ {
# Home server
publicKey = "s2plHABMTF83iqrCHlQ+o5ieJSAfudx3upm3v77y1DI="; publicKey = "s2plHABMTF83iqrCHlQ+o5ieJSAfudx3upm3v77y1DI=";
allowedIPs = [ "10.10.0.2/32" ]; allowedIPs = [ "10.10.0.2/32" ];
} }
{
# Desktop
publicKey = "nMQY5RsyTkUi3p6i8pElY9b2Z0vFEeSUdqtw7eQnbQM=";
allowedIPs = [ "10.10.0.3/32" ];
}
{
# Phone
publicKey = "4MDcBaF7oafv5ZC2fjgFHuXnrpwaRglM7fmSw7zo6CQ=";
allowedIPs = [ "10.10.0.4/32" ];
}
]; ];
}; };