courge: wireguard: init

diff --git a/hosts/courge/wireguard.nix b/hosts/courge/wireguard.nix
new file mode 100644 (file)
index 0000000..e12f615
--- /dev/null
+++ b/hosts/courge/wireguard.nix
@@ -0,0 +1,10 @@
+_:
+{
+  systemd.services."wireguard-wg-intra".serviceConfig.LoadCredentialEncrypted = [
+    "privateKey:${./wireguard/wg-intra/privateKey.cred}"
+  ];
+  networking.wireguard.wg-intra.peers.mermet.enable = true;
+  networking.wireguard.wg-intra.peers.losurdo.enable = false;
+  networking.wireguard.wg-intra.peers.aubergine.enable = false;
+  networking.wireguard.wg-intra.peers.oignon.enable = true;
+}

diff --git a/hosts/courge/wireguard/wg-intra/privateKey.cred b/hosts/courge/wireguard/wg-intra/privateKey.cred
new file mode 100644 (file)
index 0000000..a1eeaa2
Binary files /dev/null and b/hosts/courge/wireguard/wg-intra/privateKey.cred differ