This repository has no description
4.9 kB
128 lines
1{ config, pkgs, ... }:
2
3{
4
5 environment.systemPackages = [
6 pkgs.cifs-utils
7 ];
8
9 clanCore.facts.services.c-base = {
10 secret."c-base.txt" = { };
11 generator.prompt = ''
12 Please enter your username in the first line and your c-base password in the next line
13 '';
14 generator.script = ''
15 echo "$prompt_value" > "$secrets"/c-base.txt
16 '';
17 };
18
19 systemd.network.networks.c-base = {
20 matchConfig.Name = "c-base";
21 networkConfig = {
22 IgnoreCarrierLoss = "3s";
23 KeepConfiguration = "static";
24 DNS = "10.0.1.254";
25 Domains = "cbrp3.c-base.org";
26 };
27 routes = [
28 {
29 routeConfig = {
30 Destination = "10.0.0.0/23";
31 Gateway = "172.31.77.1";
32 };
33 }
34 {
35 routeConfig = {
36 Destination = "91.102.9.99/32"; # vorstand.c-base.org
37 Gateway = "172.31.77.1";
38 };
39 }
40 ];
41 };
42 services.openvpn.servers.c-base = {
43 config = ''
44 remote vpn.ext.c-base.org 1194
45 verify-x509-name vpn.ext.c-base.org name
46 client
47 proto udp
48 dev-type tun
49 dev c-base
50 resolv-retry infinite
51 nobind
52 # user openvpn
53 # group openvpn
54 persist-key
55 persist-tun
56 comp-lzo
57 # register-dns
58 # block-outside-dns
59 script-security 2
60 auth-user-pass ${config.clanCore.facts.services.c-base.secret."c-base.txt".path}
61 #auth-user-pass
62 key-direction 1
63 <tls-auth>
64 #
65 # 2048 bit OpenVPN static key
66 #
67 -----BEGIN OpenVPN Static key V1-----
68 54a66ed1048bed7508703347e89d68d6
69 5586e6a5d1218cf8675941031d540be6
70 993e07200a16ad3b770b659932ee71e5
71 f8080b5c9fa2acb3893abd40fad2552c
72 fdaf17565e617ae450efcccf5652dca5
73 a16419509024b075941098731eb25ac0
74 a64f963ece3dca1d2a64a9c5e17839d7
75 5b5080165a9b2dc90ef111879d7d3173
76 2d1027ae42d869394aca08da4472a9d0
77 6b724b4ed43a957feef7d6dfc86da241
78 74828fa0e1240941586f0d937cac32fc
79 13cc81e7bed58817353d6afaff7e6a26
80 4f9cc086af79c1cdca660d86e18cff96
81 69dd3d392caf09a468894a8504f4cc7c
82 7ae0072e6d9ad90b166ad13a39c57b3c
83 3a869e27a1d89deb161c255227551713
84 -----END OpenVPN Static key V1-----
85 </tls-auth>
86 <ca>
87 -----BEGIN CERTIFICATE-----
88 MIIGsDCCBJigAwIBAgIJAPkM1l2zA306MA0GCSqGSIb3DQEBCwUAMIGWMQswCQYD
89 VQQGEwJERTEPMA0GA1UEBxMGQmVybGluMRswGQYDVQQLExJ2cG4uZXh0LmMtYmFz
90 ZS5vcmcxGzAZBgNVBAMTEnZwbi5leHQuYy1iYXNlLm9yZzEbMBkGA1UEKRMSdnBu
91 LmV4dC5jLWJhc2Uub3JnMR8wHQYJKoZIhvcNAQkBFhBhZG1heEBjLWJhc2Uub3Jn
92 MB4XDTE2MDcwOTE4MjkyMFoXDTI2MDcxMDE4MjkyMFowgZYxCzAJBgNVBAYTAkRF
93 MQ8wDQYDVQQHEwZCZXJsaW4xGzAZBgNVBAsTEnZwbi5leHQuYy1iYXNlLm9yZzEb
94 MBkGA1UEAxMSdnBuLmV4dC5jLWJhc2Uub3JnMRswGQYDVQQpExJ2cG4uZXh0LmMt
95 YmFzZS5vcmcxHzAdBgkqhkiG9w0BCQEWEGFkbWF4QGMtYmFzZS5vcmcwggIiMA0G
96 CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDXEs+uWCXLNmm+lgP9x7u3FqWa4pPI
97 h64c6EWIULMATrhEw+Ej4fpCXwU9otFaO04fAeJmZGkDcnAYdBDiCeI0luOSdj44
98 Bg9KecSei/TskqjhDVnEBp65hiz0rZE6c1baPdLYmD5xrXWb3i0zrlBYFawuL6C2
99 lwVCEm3cadvkDJ2DleMuu3NblV8ViIDN0HZqzJNP72g1I0MgohkpetACXlf7MzQV
100 PFHfzvb04Rj2lJ8BDhceQ0WmjtVV/Ag6nka5oi954OeHMujRuH+rZYiQZDZpJLHK
101 Kh1KWTVlWPRy+AvCi9lweDWSmLccq7Ug4xMtDF4I5qW3tjCd0xqpZ21Xmo2JyKtY
102 4h8wEDPqiJvgwvkXsH17GLn5ZxiMcQuRJQYZqJephkzR9uccJeWSS76kwm/vLqG3
103 +eORlYnyjiNXtiMIhmAEFjpWUrGH8v4CijpUNP6E63ynGrRVXK684YQXkqL+xPAt
104 t6dsMBUwf94a2S1o2kgvuRCim1wlHvf1QsHrO/Hwgpzc8no/daWL+Z9Rq9okTHNK
105 nc1G5dv8TkmxIDYnLm07QMzzBoOT36BcGtkEBA+0xhQlX5PyQdM5/jnZVhdSBmoP
106 MbZXPoU/gJAIuuBuwdTlgCzYf44/9/YU/AnW8eLrbhm9KtMtoMpatrWorKqk/GPv
107 /lGNRQuNffrbiQIDAQABo4H+MIH7MB0GA1UdDgQWBBTf5cYbK+KCF9u9aobFlLbu
108 ilwX4jCBywYDVR0jBIHDMIHAgBTf5cYbK+KCF9u9aobFlLbuilwX4qGBnKSBmTCB
109 ljELMAkGA1UEBhMCREUxDzANBgNVBAcTBkJlcmxpbjEbMBkGA1UECxMSdnBuLmV4
110 dC5jLWJhc2Uub3JnMRswGQYDVQQDExJ2cG4uZXh0LmMtYmFzZS5vcmcxGzAZBgNV
111 BCkTEnZwbi5leHQuYy1iYXNlLm9yZzEfMB0GCSqGSIb3DQEJARYQYWRtYXhAYy1i
112 YXNlLm9yZ4IJAPkM1l2zA306MAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQAD
113 ggIBAMs1moiS7UZ4neOivQjqwKrBbm1j3tgmPLhDfNMmXYarGhnBGAlLxLAQWtG+
114 Fnbx8KcsJnrsWcGfZcst1z45S4a5oBdVNKOfgkMOG0glZorIDO8Odrb51rpyzU0v
115 0wcNumMNWhkFuo2OTBHPnnJIWEAFwwCCSCL0I0hQxxoaV36kphjuIwzrMJhd+XAT
116 24En58cNp6sPRDd+FzOH08uFINevyzKWYxkMgVj+e3fbuiyOB8RqvndKvtfBBcpB
117 cCO86lGnj/ETMDciTczUShxaMn9wV1zr1KH1xvT3ohUeOcQZGbGTcjG4mxlns8ZO
118 U5J3Yrcd1eMfJq9Bwd3zPsTLnT8LwIS8vfYRav9b34XdqcBG73dhrjsicMK0Qy0z
119 Qz7vKJzcvrEnKuaMyB3mCxz/UvbNc2Bupwm4FmzN5eFjDs+7paYFdfOzqMjoRP+8
120 bcXSqDN5P2eUd7cdsZXaFNcsf1FkWlE3GudVBOmNJqz9zBab/T5J+l4Z90Pd6OUX
121 GNozEvLhcJkvPKA526TegHTGC8hMquxKc9tpOzNRqZJMFa+UG1mgMrMepRmM/B3s
122 QrKI1C11iCVYfb9J0tQUkfENHMx4J7mG2DZAhnKWQDU2awM41qU4A7aBYaJvDPnQ
123 RRcbaT0D794lKUQwH/mZuyKzF22oZNk1o1TV2SaFXqgX5tDt
124 -----END CERTIFICATE-----
125 </ca>
126 '';
127 };
128}