nixos-config

commit a692fa82c92411780998d65b316b9a2bb2b20837
parent c601ccda967363e9d550bbdb3f5055dda948d6b5
Author: vin <vin@vineetk.net>
Date:   Sat,  8 Mar 2025 19:00:23 -0500

demiurge: switch back to wg-quick for fixed ipv6

Diffstat:
M
hosts/demiurge/default.nix
 | 
45
+++++++++++++++++++++++----------------------

1 file changed, 23 insertions(+), 22 deletions(-)
diff --git a/hosts/demiurge/default.nix b/hosts/demiurge/default.nix
@@ -43,28 +43,29 @@
       allowedUDPPorts = [ 51413 ];
     };
 
-    wireguard.interfaces = {
-      # mullvad to miami
-      us-mia-wg-002 = {
-        ips = [
-          "10.135.221.102/32"
-          "fc00:bbbb:bbbb:bb01:d:0:7:dd66/128"
-        ];
-        privateKey = "***REDACTED_WG_KEY***=";
-
-        postSetup = ''
-          ${pkgs.iproute2}/bin/ip route add 45.134.142.206 via 192.168.1.1
-        '';
-        postShutdown = ''
-          ${pkgs.iproute2}/bin/ip route delete 45.134.142.206 via 192.168.1.1
-        '';
-
-        peers = [{
-          allowedIPs = [ "0.0.0.0/0" "::0/0" ];
-          endpoint = "45.134.142.206:51820";
-          publicKey = "H5t7PsMDnUAHrR8D2Jt3Mh6N6w43WmCzrOHShlEU+zw=";
-        }];
-      };
+    # mullvad to miami
+    wg-quick.interfaces.us-mia-wg-002 = {
+      address = [
+        "10.135.221.102/32"
+        "fc00:bbbb:bbbb:bb01:d:0:7:dd66/128"
+      ];
+      privateKey = "***REDACTED_WG_KEY***=";
+
+      # supposed to be done by tailscale instead \_(:/)_/
+      postUp = ''
+        ip route add 100.64.0.0/24 dev tailscale0
+        ip route add 100.100.100.100/32 dev tailscale0
+      '';
+      postDown = ''
+        ip route del 100.64.0.0/24 dev tailscale0
+        ip route del 100.100.100.100/32 dev tailscale0
+      '';
+
+      peers = [{
+        allowedIPs = [ "0.0.0.0/0" "::0/0" ];
+        endpoint = "45.134.142.206:51820";
+        publicKey = "H5t7PsMDnUAHrR8D2Jt3Mh6N6w43WmCzrOHShlEU+zw=";
+      }];
     };
   };