v/infrastructure
1
0
Fork 0
Code Issues 13 Pull requests 1 Projects Releases Packages Activity Actions

more metrics
Some checks reported errors
continuous-integration/drone/push Build was killed
Details

Browse source
This commit is contained in:
Vivian 2022-07-30 12:22:19 +02:00
parent 0e203b6eca
commit ccfbd0b477
6 changed files with 46 additions and 42 deletions
Download patch file Download diff file Expand all files Collapse all files

9
nixos/hosts/wireguard/configuration.nix
View file

@ -22,7 +22,9 @@ let vs = config.vault-secrets.secrets; in
environment.noXlibs = lib.mkForce false;
networking.firewall.allowedUDPPorts = [ config.networking.wireguard.interfaces.wg0.listenPort ];
networking.firewall.allowedUDPPorts = [
config.networking.wireguard.interfaces.wg0.listenPort
];
vault-secrets.secrets.wireguard = {
services = [ "wireguard-wg0" ];
@ -34,6 +36,11 @@ let vs = config.vault-secrets.secrets; in
externalInterface = "eth0";
};
services.prometheus.exporters.wireguard = {
enable = true;
openFirewall = true;
};
networking.wireguard.interfaces.wg0 = {
ips = [ "10.100.0.1/24" ];
listenPort = 51820;