This repository has no description
wiregrill: add missing secret generator
author
lassulus
date
(Mar 17, 2024, 6:24 AM CET)
commit
5f8e63f3
5f8e63f39129b0daa9380e30dd080c09ed04c746
parent
2d2c7510
2d2c7510cd507765a295ffa72f000eff29fc5b50
+14
+14
2configs/wiregrill.nix
+14
2configs/wiregrill.nix
···
22
22
{ predicate = "-i wiregrill -o eth0"; target = "ACCEPT"; }
23
23
{ predicate = "-o wiregrill -m conntrack --ctstate RELATED,ESTABLISHED"; target = "ACCEPT"; }
24
24
]);
25
+
26
+
clanCore.secrets.wiregrill = {
27
+
secrets."wiregrill.key" = { };
28
+
facts."wiregrill.pub" = { };
29
+
generator.path = with pkgs; [
30
+
coreutils
31
+
wireguard-tools
32
+
];
33
+
generator.script = ''
34
+
wg genkey > "$secrets"/wiregrill.key
35
+
cat "$secrets"/wiregrill.key | wg pubkey > "$facts"/wiregrill.pub
36
+
'';
37
+
};
38
+
25
39
systemd.network.networks.wiregrill = {
26
40
matchConfig.Name = "wiregrill";
27
41
address =