From 8a901c24b029719cc8d3ff355f95bceb1dc93b60 Mon Sep 17 00:00:00 2001
From: Mel <mel@rnrd.eu>
Date: Wed, 27 Aug 2025 13:14:42 +0200
Subject: Move WireGuard server peer definitions to configuration option

Signed-off-by: Mel <mel@rnrd.eu>
---
 machines/renard/default.nix | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

(limited to 'machines/renard')

diff --git a/machines/renard/default.nix b/machines/renard/default.nix
index d9871c3..4b9386d 100644
--- a/machines/renard/default.nix
+++ b/machines/renard/default.nix
@@ -48,6 +48,24 @@
         "goat"
       ];
     };
+
+    wireguard.server = {
+      enable = true;
+      externalInterface = "ens18";
+
+      peers = {
+        mel = {
+          key = "vnZoHXapCLLUhZ8A8R5W0iJ8LpWVLve29z41kkoT0BU=";
+          ip = 2;
+        };
+
+        # serpentine will use renard for ipv4-only communication (like github)
+        serpentine = {
+          key = "izeA+l8uGdHdfVw8B2yIMk4gXdapwyuCzSqLuEQzDFc=";
+          ip = 3;
+        };
+      };
+    };
   };
 
   services.nginx.virtualHosts = {
-- 
cgit 1.4.1