This repository has no description
4.8 kB
125 lines
1{ config, lib, pkgs, ... }:
2
3{
4
5 environment.systemPackages = [
6 pkgs.cifs-utils
7 ];
8
9
10 clanCore.facts.services.c-base = {
11 secret."c-base.txt" = { };
12 generator.prompt = ''
13 Please enter your username in the first line and your c-base password in the next line
14 '';
15 generator.script = ''
16 echo "$prompt_value" > "$secrets"/c-base.txt
17 '';
18 };
19
20 systemd.network.networks.c-base = {
21 matchConfig.Name = "c-base";
22 networkConfig = {
23 IgnoreCarrierLoss = "3s";
24 KeepConfiguration = "static";
25 DNS = "10.0.1.254";
26 Domains = "cbrp3.c-base.org";
27 };
28 routes = [
29 { routeConfig = {
30 Destination = "10.0.0.0/23";
31 Gateway = "172.31.77.1";
32 };}
33 { routeConfig = {
34 Destination = "91.102.9.99/32"; # vorstand.c-base.org
35 Gateway = "172.31.77.1";
36 };}
37 ];
38 };
39 services.openvpn.servers.c-base = {
40 config = ''
41 remote vpn.ext.c-base.org 1194
42 verify-x509-name vpn.ext.c-base.org name
43 client
44 proto udp
45 dev-type tun
46 dev c-base
47 resolv-retry infinite
48 nobind
49 # user openvpn
50 # group openvpn
51 persist-key
52 persist-tun
53 comp-lzo
54 # register-dns
55 # block-outside-dns
56 script-security 2
57 auth-user-pass ${config.clanCore.facts.services.c-base.secret."c-base.txt".path}
58 #auth-user-pass
59 key-direction 1
60 <tls-auth>
61 #
62 # 2048 bit OpenVPN static key
63 #
64 -----BEGIN OpenVPN Static key V1-----
65 54a66ed1048bed7508703347e89d68d6
66 5586e6a5d1218cf8675941031d540be6
67 993e07200a16ad3b770b659932ee71e5
68 f8080b5c9fa2acb3893abd40fad2552c
69 fdaf17565e617ae450efcccf5652dca5
70 a16419509024b075941098731eb25ac0
71 a64f963ece3dca1d2a64a9c5e17839d7
72 5b5080165a9b2dc90ef111879d7d3173
73 2d1027ae42d869394aca08da4472a9d0
74 6b724b4ed43a957feef7d6dfc86da241
75 74828fa0e1240941586f0d937cac32fc
76 13cc81e7bed58817353d6afaff7e6a26
77 4f9cc086af79c1cdca660d86e18cff96
78 69dd3d392caf09a468894a8504f4cc7c
79 7ae0072e6d9ad90b166ad13a39c57b3c
80 3a869e27a1d89deb161c255227551713
81 -----END OpenVPN Static key V1-----
82 </tls-auth>
83 <ca>
84 -----BEGIN CERTIFICATE-----
85 MIIGsDCCBJigAwIBAgIJAPkM1l2zA306MA0GCSqGSIb3DQEBCwUAMIGWMQswCQYD
86 VQQGEwJERTEPMA0GA1UEBxMGQmVybGluMRswGQYDVQQLExJ2cG4uZXh0LmMtYmFz
87 ZS5vcmcxGzAZBgNVBAMTEnZwbi5leHQuYy1iYXNlLm9yZzEbMBkGA1UEKRMSdnBu
88 LmV4dC5jLWJhc2Uub3JnMR8wHQYJKoZIhvcNAQkBFhBhZG1heEBjLWJhc2Uub3Jn
89 MB4XDTE2MDcwOTE4MjkyMFoXDTI2MDcxMDE4MjkyMFowgZYxCzAJBgNVBAYTAkRF
90 MQ8wDQYDVQQHEwZCZXJsaW4xGzAZBgNVBAsTEnZwbi5leHQuYy1iYXNlLm9yZzEb
91 MBkGA1UEAxMSdnBuLmV4dC5jLWJhc2Uub3JnMRswGQYDVQQpExJ2cG4uZXh0LmMt
92 YmFzZS5vcmcxHzAdBgkqhkiG9w0BCQEWEGFkbWF4QGMtYmFzZS5vcmcwggIiMA0G
93 CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDXEs+uWCXLNmm+lgP9x7u3FqWa4pPI
94 h64c6EWIULMATrhEw+Ej4fpCXwU9otFaO04fAeJmZGkDcnAYdBDiCeI0luOSdj44
95 Bg9KecSei/TskqjhDVnEBp65hiz0rZE6c1baPdLYmD5xrXWb3i0zrlBYFawuL6C2
96 lwVCEm3cadvkDJ2DleMuu3NblV8ViIDN0HZqzJNP72g1I0MgohkpetACXlf7MzQV
97 PFHfzvb04Rj2lJ8BDhceQ0WmjtVV/Ag6nka5oi954OeHMujRuH+rZYiQZDZpJLHK
98 Kh1KWTVlWPRy+AvCi9lweDWSmLccq7Ug4xMtDF4I5qW3tjCd0xqpZ21Xmo2JyKtY
99 4h8wEDPqiJvgwvkXsH17GLn5ZxiMcQuRJQYZqJephkzR9uccJeWSS76kwm/vLqG3
100 +eORlYnyjiNXtiMIhmAEFjpWUrGH8v4CijpUNP6E63ynGrRVXK684YQXkqL+xPAt
101 t6dsMBUwf94a2S1o2kgvuRCim1wlHvf1QsHrO/Hwgpzc8no/daWL+Z9Rq9okTHNK
102 nc1G5dv8TkmxIDYnLm07QMzzBoOT36BcGtkEBA+0xhQlX5PyQdM5/jnZVhdSBmoP
103 MbZXPoU/gJAIuuBuwdTlgCzYf44/9/YU/AnW8eLrbhm9KtMtoMpatrWorKqk/GPv
104 /lGNRQuNffrbiQIDAQABo4H+MIH7MB0GA1UdDgQWBBTf5cYbK+KCF9u9aobFlLbu
105 ilwX4jCBywYDVR0jBIHDMIHAgBTf5cYbK+KCF9u9aobFlLbuilwX4qGBnKSBmTCB
106 ljELMAkGA1UEBhMCREUxDzANBgNVBAcTBkJlcmxpbjEbMBkGA1UECxMSdnBuLmV4
107 dC5jLWJhc2Uub3JnMRswGQYDVQQDExJ2cG4uZXh0LmMtYmFzZS5vcmcxGzAZBgNV
108 BCkTEnZwbi5leHQuYy1iYXNlLm9yZzEfMB0GCSqGSIb3DQEJARYQYWRtYXhAYy1i
109 YXNlLm9yZ4IJAPkM1l2zA306MAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQAD
110 ggIBAMs1moiS7UZ4neOivQjqwKrBbm1j3tgmPLhDfNMmXYarGhnBGAlLxLAQWtG+
111 Fnbx8KcsJnrsWcGfZcst1z45S4a5oBdVNKOfgkMOG0glZorIDO8Odrb51rpyzU0v
112 0wcNumMNWhkFuo2OTBHPnnJIWEAFwwCCSCL0I0hQxxoaV36kphjuIwzrMJhd+XAT
113 24En58cNp6sPRDd+FzOH08uFINevyzKWYxkMgVj+e3fbuiyOB8RqvndKvtfBBcpB
114 cCO86lGnj/ETMDciTczUShxaMn9wV1zr1KH1xvT3ohUeOcQZGbGTcjG4mxlns8ZO
115 U5J3Yrcd1eMfJq9Bwd3zPsTLnT8LwIS8vfYRav9b34XdqcBG73dhrjsicMK0Qy0z
116 Qz7vKJzcvrEnKuaMyB3mCxz/UvbNc2Bupwm4FmzN5eFjDs+7paYFdfOzqMjoRP+8
117 bcXSqDN5P2eUd7cdsZXaFNcsf1FkWlE3GudVBOmNJqz9zBab/T5J+l4Z90Pd6OUX
118 GNozEvLhcJkvPKA526TegHTGC8hMquxKc9tpOzNRqZJMFa+UG1mgMrMepRmM/B3s
119 QrKI1C11iCVYfb9J0tQUkfENHMx4J7mG2DZAhnKWQDU2awM41qU4A7aBYaJvDPnQ
120 RRcbaT0D794lKUQwH/mZuyKzF22oZNk1o1TV2SaFXqgX5tDt
121 -----END CERTIFICATE-----
122 </ca>
123 '';
124 };
125}