tixie/nixcfg
1
0
Fork 0
forked from Deuxfleurs/nixcfg
Code Pull requests Activity

Remove root, add wg-quick-wg0 after unbound

Browse source
This commit is contained in:
Alex 2022-11-28 10:19:48 +01:00
parent c4ed69336b
commit a327876e25
Signed by untrusted user: lx
GPG key ID: 0E496D15096376BE
2 changed files with 1 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
cluster/prod/ssh_config
View file

@ -23,13 +23,10 @@ Host doradille
Host df-ykl Host df-ykl
HostName df-ykl.machine.deuxfleurs.fr HostName df-ykl.machine.deuxfleurs.fr
User root
Host df-ymf Host df-ymf
HostName df-ymf.machine.deuxfleurs.fr HostName df-ymf.machine.deuxfleurs.fr
User root
Host df-ymk Host df-ymk
HostName df-ymk.machine.deuxfleurs.fr HostName df-ymk.machine.deuxfleurs.fr
User root

1
nix/deuxfleurs.nix
View file

@ -210,6 +210,7 @@ in
services.resolved.enable = false; services.resolved.enable = false;
# Configure Wireguard VPN between all nodes # Configure Wireguard VPN between all nodes
systemd.services."wg-quick-wg0".after = [ "unbound.service" ];
networking.wg-quick.interfaces.wg0 = { networking.wg-quick.interfaces.wg0 = {
address = [ "${cfg.cluster_ip}/16" ]; address = [ "${cfg.cluster_ip}/16" ];
listenPort = cfg.wireguard_port; listenPort = cfg.wireguard_port;