From 3ebd082be227a2c93913c5445958c3caa7595f28 Mon Sep 17 00:00:00 2001 From: LavaDesu Date: Tue, 20 May 2025 11:51:42 +1000 Subject: [PATCH] system/wireguard: use wg-quick for clients --- modules/system/wireguard.nix | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/modules/system/wireguard.nix b/modules/system/wireguard.nix index ccdf5be..621e8db 100644 --- a/modules/system/wireguard.nix +++ b/modules/system/wireguard.nix @@ -112,6 +112,20 @@ let peers = [ serverPeer ]; }; }; + + clientQuickConfig = { + wg-quick.interfaces = + let + client = clients."${config.networking.hostName}"; + in { + wg0 = { + address = client.allowedIPs; + privateKeyFile = config.age.secrets."wg_${config.networking.hostName}".path; + + peers = [ serverPeer ]; + }; + }; + }; in { boot.kernel.sysctl = lib.mkIf (config.networking.hostName == serverName) ({ "net.ipv6.conf.all.forwarding" = true; @@ -120,6 +134,7 @@ in { networking = lib.mkMerge [ (lib.mkIf (config.networking.hostName == serverName) serverConfig) - (lib.mkIf (builtins.hasAttr config.networking.hostName clients) clientConfig) + #(lib.mkIf (builtins.hasAttr config.networking.hostName clients) clientConfig) + (lib.mkIf (builtins.hasAttr config.networking.hostName clients) clientQuickConfig) ]; }