This repository has no description
4.5 kB
115 lines
1{ config, lib, pkgs, ... }:
2
3let
4in {
5
6 environment.systemPackages = [
7 pkgs.cifs-utils
8 ];
9
10 systemd.network.networks.c-base = {
11 matchConfig.Name = "c-base";
12 networkConfig = {
13 IgnoreCarrierLoss = "3s";
14 KeepConfiguration = "static";
15 DNS = "10.0.1.254";
16 Domains = "cbrp3.c-base.org";
17 };
18 routes = [
19 { routeConfig = {
20 Destination = "10.0.0.0/23";
21 Gateway = "172.31.77.1";
22 };}
23 { routeConfig = {
24 Destination = "91.102.9.99/32"; # vorstand.c-base.org
25 Gateway = "172.31.77.1";
26 };}
27 ];
28 };
29 services.openvpn.servers.c-base = {
30 config = ''
31 remote vpn.ext.c-base.org 1194
32 verify-x509-name vpn.ext.c-base.org name
33 client
34 proto udp
35 dev-type tun
36 dev c-base
37 resolv-retry infinite
38 nobind
39 # user openvpn
40 # group openvpn
41 persist-key
42 persist-tun
43 comp-lzo
44 # register-dns
45 # block-outside-dns
46 script-security 2
47 auth-user-pass ${config.krebs.secret.directory}/cbase.txt
48 #auth-user-pass
49 key-direction 1
50 <tls-auth>
51 #
52 # 2048 bit OpenVPN static key
53 #
54 -----BEGIN OpenVPN Static key V1-----
55 54a66ed1048bed7508703347e89d68d6
56 5586e6a5d1218cf8675941031d540be6
57 993e07200a16ad3b770b659932ee71e5
58 f8080b5c9fa2acb3893abd40fad2552c
59 fdaf17565e617ae450efcccf5652dca5
60 a16419509024b075941098731eb25ac0
61 a64f963ece3dca1d2a64a9c5e17839d7
62 5b5080165a9b2dc90ef111879d7d3173
63 2d1027ae42d869394aca08da4472a9d0
64 6b724b4ed43a957feef7d6dfc86da241
65 74828fa0e1240941586f0d937cac32fc
66 13cc81e7bed58817353d6afaff7e6a26
67 4f9cc086af79c1cdca660d86e18cff96
68 69dd3d392caf09a468894a8504f4cc7c
69 7ae0072e6d9ad90b166ad13a39c57b3c
70 3a869e27a1d89deb161c255227551713
71 -----END OpenVPN Static key V1-----
72 </tls-auth>
73 <ca>
74 -----BEGIN CERTIFICATE-----
75 MIIGsDCCBJigAwIBAgIJAPkM1l2zA306MA0GCSqGSIb3DQEBCwUAMIGWMQswCQYD
76 VQQGEwJERTEPMA0GA1UEBxMGQmVybGluMRswGQYDVQQLExJ2cG4uZXh0LmMtYmFz
77 ZS5vcmcxGzAZBgNVBAMTEnZwbi5leHQuYy1iYXNlLm9yZzEbMBkGA1UEKRMSdnBu
78 LmV4dC5jLWJhc2Uub3JnMR8wHQYJKoZIhvcNAQkBFhBhZG1heEBjLWJhc2Uub3Jn
79 MB4XDTE2MDcwOTE4MjkyMFoXDTI2MDcxMDE4MjkyMFowgZYxCzAJBgNVBAYTAkRF
80 MQ8wDQYDVQQHEwZCZXJsaW4xGzAZBgNVBAsTEnZwbi5leHQuYy1iYXNlLm9yZzEb
81 MBkGA1UEAxMSdnBuLmV4dC5jLWJhc2Uub3JnMRswGQYDVQQpExJ2cG4uZXh0LmMt
82 YmFzZS5vcmcxHzAdBgkqhkiG9w0BCQEWEGFkbWF4QGMtYmFzZS5vcmcwggIiMA0G
83 CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDXEs+uWCXLNmm+lgP9x7u3FqWa4pPI
84 h64c6EWIULMATrhEw+Ej4fpCXwU9otFaO04fAeJmZGkDcnAYdBDiCeI0luOSdj44
85 Bg9KecSei/TskqjhDVnEBp65hiz0rZE6c1baPdLYmD5xrXWb3i0zrlBYFawuL6C2
86 lwVCEm3cadvkDJ2DleMuu3NblV8ViIDN0HZqzJNP72g1I0MgohkpetACXlf7MzQV
87 PFHfzvb04Rj2lJ8BDhceQ0WmjtVV/Ag6nka5oi954OeHMujRuH+rZYiQZDZpJLHK
88 Kh1KWTVlWPRy+AvCi9lweDWSmLccq7Ug4xMtDF4I5qW3tjCd0xqpZ21Xmo2JyKtY
89 4h8wEDPqiJvgwvkXsH17GLn5ZxiMcQuRJQYZqJephkzR9uccJeWSS76kwm/vLqG3
90 +eORlYnyjiNXtiMIhmAEFjpWUrGH8v4CijpUNP6E63ynGrRVXK684YQXkqL+xPAt
91 t6dsMBUwf94a2S1o2kgvuRCim1wlHvf1QsHrO/Hwgpzc8no/daWL+Z9Rq9okTHNK
92 nc1G5dv8TkmxIDYnLm07QMzzBoOT36BcGtkEBA+0xhQlX5PyQdM5/jnZVhdSBmoP
93 MbZXPoU/gJAIuuBuwdTlgCzYf44/9/YU/AnW8eLrbhm9KtMtoMpatrWorKqk/GPv
94 /lGNRQuNffrbiQIDAQABo4H+MIH7MB0GA1UdDgQWBBTf5cYbK+KCF9u9aobFlLbu
95 ilwX4jCBywYDVR0jBIHDMIHAgBTf5cYbK+KCF9u9aobFlLbuilwX4qGBnKSBmTCB
96 ljELMAkGA1UEBhMCREUxDzANBgNVBAcTBkJlcmxpbjEbMBkGA1UECxMSdnBuLmV4
97 dC5jLWJhc2Uub3JnMRswGQYDVQQDExJ2cG4uZXh0LmMtYmFzZS5vcmcxGzAZBgNV
98 BCkTEnZwbi5leHQuYy1iYXNlLm9yZzEfMB0GCSqGSIb3DQEJARYQYWRtYXhAYy1i
99 YXNlLm9yZ4IJAPkM1l2zA306MAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQAD
100 ggIBAMs1moiS7UZ4neOivQjqwKrBbm1j3tgmPLhDfNMmXYarGhnBGAlLxLAQWtG+
101 Fnbx8KcsJnrsWcGfZcst1z45S4a5oBdVNKOfgkMOG0glZorIDO8Odrb51rpyzU0v
102 0wcNumMNWhkFuo2OTBHPnnJIWEAFwwCCSCL0I0hQxxoaV36kphjuIwzrMJhd+XAT
103 24En58cNp6sPRDd+FzOH08uFINevyzKWYxkMgVj+e3fbuiyOB8RqvndKvtfBBcpB
104 cCO86lGnj/ETMDciTczUShxaMn9wV1zr1KH1xvT3ohUeOcQZGbGTcjG4mxlns8ZO
105 U5J3Yrcd1eMfJq9Bwd3zPsTLnT8LwIS8vfYRav9b34XdqcBG73dhrjsicMK0Qy0z
106 Qz7vKJzcvrEnKuaMyB3mCxz/UvbNc2Bupwm4FmzN5eFjDs+7paYFdfOzqMjoRP+8
107 bcXSqDN5P2eUd7cdsZXaFNcsf1FkWlE3GudVBOmNJqz9zBab/T5J+l4Z90Pd6OUX
108 GNozEvLhcJkvPKA526TegHTGC8hMquxKc9tpOzNRqZJMFa+UG1mgMrMepRmM/B3s
109 QrKI1C11iCVYfb9J0tQUkfENHMx4J7mG2DZAhnKWQDU2awM41qU4A7aBYaJvDPnQ
110 RRcbaT0D794lKUQwH/mZuyKzF22oZNk1o1TV2SaFXqgX5tDt
111 -----END CERTIFICATE-----
112 </ca>
113 '';
114 };
115}