diff options
| author | Joe Mou <dev@mou.fo> | 2024-04-15 19:12:53 -0400 |
|---|---|---|
| committer | Joe Mou <dev@mou.fo> | 2024-04-15 19:12:53 -0400 |
| commit | fb01b4b5aacd8fcc7f7d18b0f4d2b565593e1489 (patch) | |
| tree | 3a24b9fda19558c08401f6f2755292b09c5339cd | |
| parent | a327edf7ae566b10a6136bb4f679fcdec1ac97e1 (diff) | |
comments
| -rw-r--r-- | hostnix/creep/configuration.nix | 3 | ||||
| -rw-r--r-- | hostnix/creep/wifi-vpn.nix | 6 |
2 files changed, 9 insertions, 0 deletions
diff --git a/hostnix/creep/configuration.nix b/hostnix/creep/configuration.nix index 67f7732..7fa748d 100644 --- a/hostnix/creep/configuration.nix +++ b/hostnix/creep/configuration.nix @@ -1,3 +1,5 @@ +# NetComm router (CG-NAT) - 192.168.20.1 + { pkgs, ... }: { @@ -55,6 +57,7 @@ services.openssh.enable = true; + # Note: seems to leave stale connections open on server on dirty poweroff. systemd.services.reverse-ssh = { description = "SSH reverse tunnel"; wantedBy = [ "multi-user.target" ]; diff --git a/hostnix/creep/wifi-vpn.nix b/hostnix/creep/wifi-vpn.nix index 8a790c4..ad94f4b 100644 --- a/hostnix/creep/wifi-vpn.nix +++ b/hostnix/creep/wifi-vpn.nix @@ -1,8 +1,14 @@ +# TODO not working? + { pkgs, ... }: { boot.kernel.sysctl."net.ipv4.ip_forward" = 1; + # Manual configuration on popfresh.mou.town: + # /etc/wireguard/wg0.conf + # # firewall-cmd --add-port=51820/udp + # # systemctl enable --now wg-quick@wg0 networking.wg-quick.interfaces = { wg0 = { address = [ "172.28.89.2/24" ]; |