privatevoid.net/depot
1
1
Fork 0
Code Issues 23 Pull requests 2 Projects 3 Releases Packages Wiki Activity Actions

VEGAS/backbone-routing: remove wgautobahn

Browse source
This commit is contained in:
Max Headroom 2023-07-19 17:46:15 +02:00
parent c9c838664c
commit 53e8f2cabf
3 changed files with 0 additions and 31 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
hosts/VEGAS/services/backbone-routing/monitoring.nix
View file

@ -1,11 +1,6 @@
{ {
services.grafana-agent.settings.integrations.blackbox = { services.grafana-agent.settings.integrations.blackbox = {
blackbox_targets = [ blackbox_targets = [
{
name = "default/autobahn";
module = "tcpConnect";
address = "10.15.0.2:80";
}
{ {
name = "default/anon-relay"; name = "default/anon-relay";
module = "tcpConnect"; module = "tcpConnect";

25
hosts/VEGAS/services/backbone-routing/peering.nix
View file

@ -1,16 +1,6 @@
{ config, ... }: { config, ... }:
{ {
networking.firewall.allowedUDPPorts = [
config.networking.wireguard.interfaces.wgautobahn.listenPort
];
age.secrets.wireguard-key-wgautobahn = {
file = ../../../../secrets/wireguard-key-wgautobahn.age;
owner = "root";
group = "root";
mode = "0400";
};
age.secrets.wireguard-key-wgmv = { age.secrets.wireguard-key-wgmv = {
file = ../../../../secrets/wireguard-key-wgmv.age; file = ../../../../secrets/wireguard-key-wgmv.age;
owner = "root"; owner = "root";
@ -20,21 +10,6 @@
networking.wireguard = { networking.wireguard = {
enable = true; enable = true;
interfaces.wgautobahn = {
ips = [ "10.15.0.1/30" ];
listenPort = 51820;
privateKeyFile = config.age.secrets.wireguard-key-wgautobahn.path;
allowedIPsAsRoutes = true;
peers = [
# animus
{
publicKey = "CIJ8W5SDMyPnSZLN2CNplwhGaNPUGoLV0mdzoDHhxUo=";
allowedIPs = [ "10.15.0.0/30" "10.150.0.0/16" ];
endpoint = "116.202.226.86:53042";
}
];
};
interfaces.wgmv = { interfaces.wgmv = {
ips = [ "10.65.193.152/32" ]; ips = [ "10.65.193.152/32" ];
privateKeyFile = config.age.secrets.wireguard-key-wgmv.path; privateKeyFile = config.age.secrets.wireguard-key-wgmv.path;

1
secrets.nix
View file

@ -72,6 +72,5 @@ in with hosts;
"secrets/synapse-ldap.age".publicKeys = max ++ map systemKeys [ VEGAS ]; "secrets/synapse-ldap.age".publicKeys = max ++ map systemKeys [ VEGAS ];
"secrets/synapse-turn.age".publicKeys = max ++ map systemKeys [ VEGAS ]; "secrets/synapse-turn.age".publicKeys = max ++ map systemKeys [ VEGAS ];
"secrets/wireguard-key-storm-VEGAS.age".publicKeys = max ++ map systemKeys [ VEGAS ]; "secrets/wireguard-key-storm-VEGAS.age".publicKeys = max ++ map systemKeys [ VEGAS ];
"secrets/wireguard-key-wgautobahn.age".publicKeys = max ++ map systemKeys [ VEGAS ];
"secrets/wireguard-key-wgmv.age".publicKeys = max ++ map systemKeys [ VEGAS ]; "secrets/wireguard-key-wgmv.age".publicKeys = max ++ map systemKeys [ VEGAS ];
} }