This repository has no description
machines.yellow: add airvpn secret
author
lassulus
date
(Apr 7, 2024, 11:10 AM CEST)
commit
c9b3fe21
c9b3fe21991534f4515904c3ef47c0d79fad5cdf
parent
33398c26
33398c2662d6145f063103b75c55e9e34e0e3972
+14
-1
+14
-1
machines/yellow/config.nix
+14
-1
machines/yellow/config.nix
···
45
45
ip link set airvpn netns transmission
46
46
ip -n transmission addr add 10.176.43.231/32 dev airvpn
47
47
ip -n transmission addr add fd7d:76ee:e68f:a993:41b3:846b:d271:30d8/128 dev airvpn
48
-
ip netns exec transmission wg syncconf airvpn <(wg-quick strip /etc/secrets/airvpn.conf)
48
+
ip netns exec transmission wg syncconf airvpn <(wg-quick strip ${config.clanCore.facts.services.airvpn.secret."airvpn.conf".path})
49
49
ip -n transmission link set airvpn up
50
50
ip -n transmission route add default dev airvpn
51
51
ip -6 -n transmission route add default dev airvpn
···
64
64
RemainAfterExit = true;
65
65
Type = "oneshot";
66
66
};
67
+
};
68
+
69
+
clanCore.facts.services.airvpn = {
70
+
secret."airvpn.conf" = { };
71
+
generator.path = with pkgs; [ coreutils ];
72
+
generator.prompt = ''
73
+
login into https://airvpn.org/ goto https://airvpn.org/generator/
74
+
generate a wireguard config
75
+
paste the config here
76
+
'';
77
+
generator.script = ''
78
+
echo "$prompt_value" > "$secrets"/airvpn.conf
79
+
'';
67
80
};
68
81
69
82
# so we can forward traffic from the transmission network namespace