diff options
| author | Franck Cuny <franck@fcuny.net> | 2025-10-24 09:02:29 -0700 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2025-10-24 09:02:29 -0700 |
| commit | e55b8ee0f7073b46fb343a97ee744a95ec40d2ed (patch) | |
| tree | 329c992647f1c420cbf87cec4cca206474f98b39 /machines/nixos/x86_64-linux/do-rproxy/default.nix | |
| parent | move a few more things back as profiles (diff) | |
| download | infra-e55b8ee0f7073b46fb343a97ee744a95ec40d2ed.tar.gz | |
simplify hosts management
Diffstat (limited to '')
| -rw-r--r-- | machines/nixos/x86_64-linux/do-rproxy/default.nix | 45 |
1 files changed, 0 insertions, 45 deletions
diff --git a/machines/nixos/x86_64-linux/do-rproxy/default.nix b/machines/nixos/x86_64-linux/do-rproxy/default.nix deleted file mode 100644 index fd21220..0000000 --- a/machines/nixos/x86_64-linux/do-rproxy/default.nix +++ /dev/null @@ -1,45 +0,0 @@ -{ config, modulesPath, ... }: -{ - - imports = [ - (modulesPath + "/virtualisation/digital-ocean-config.nix") - ./disks.nix - ./secrets.nix - ./profiles/nginx.nix - ../../../../profiles/defaults.nix - ../../../../profiles/server.nix - ../../../../profiles/cgroups.nix - ]; - - networking.hostName = "do-rproxy"; - - networking.wireguard = { - enable = true; - interfaces.wg0 = { - ips = [ "10.100.0.50/32" ]; - listenPort = 51871; - privateKeyFile = config.age.secrets.wireguard.path; - peers = [ - { - # vm-synology - publicKey = "bJZyQoemudGJQox8Iegebm23c4BNVIxRPy1kmI2l904="; - allowedIPs = [ "10.100.0.40/32" ]; - persistentKeepalive = 25; - } - { - # rivendell - publicKey = "jf7T7TMKQWSgSXhUplldZDV9G2y2BjMmHIAhg5d26ng="; - allowedIPs = [ "10.100.0.60/32" ]; - persistentKeepalive = 25; - } - ]; - }; - }; - - networking.firewall.trustedInterfaces = [ "wg0" ]; - networking.firewall.allowedUDPPorts = [ 51871 ]; - - my.modules.hardware.do-droplet.enable = true; - - system.stateVersion = "25.05"; # Did you read the comment? -} |
