commit 0b0a552480c78be16466c7b4b0e7d90de1862fd9 · ryan.freumh.org/eilean-nix

+9 -3
modules/wireguard/default.nix
···

       8
       8
        
           enable = mkEnableOption "wireguard";

     

       9
       9
        
           server = mkOption {

     

       10
       10
        
             type = with types; bool;

     

       11
       11
       -
             default = cfg.hosts.${config.networking.hostName}.server;

     

       11
       11
       +
             default =

     

       12
       12
       +
               if cfg.hosts ? config.networking.hostName then

     

       13
       13
       +
                 cfg.hosts.${config.networking.hostName}.server

     

       14
       14
       +
               else false;

     

       12
       15
        
           };

     

       13
       16
        
           hosts =

     

       14
       17
        
             let hostOps = { ... }: {

     
···

       57
       60
        
             wireguard = {

     

       58
       61
        
               enable = true;

     

       59
       62
        
               interfaces.wg0 = let hostName = config.networking.hostName; in {

     

       60
       60
       -
                 ips = [ "${cfg.hosts."${hostName}".ip}/24" ];

     

       61
       61
       -
                 listenPort = 51820;

     

       63
       63
       +
                 ips =

     

       64
       64
       +
                   if cfg.hosts ? hostname then

     

       65
       65
       +
                     [ "${cfg.hosts."${hostName}".ip}/24" ]

     

       66
       66
       +
                   else [ ];

     

       67
       67
       +
                 listenPort = 51820; 

     

       62
       68
        
                 privateKeyFile = "${config.eilean.secretsDir}/wireguard-key-${hostName}";

     

       63
       69
        
                 peers =

     

       64
       70
        
                   let