# shared vpn definitions for wireguard, used by both the tunnel
# and the plain vpn module.

{
  # the public key of the shared wireguard key used by all vpn hosts.
  # the matching private key is the secret `wg-private-key`.
  public = "s5yyPCJiN0uqW0jzKIbYCF7I9TthymiRzpNt466XeWk=";

  # users allowed to connect to any wireguard-based service.
  # their ip is always a template, with 'X' representing the
  # network subnet they are connecting to.
  users = {
    mel = {
      key = "vnZoHXapCLLUhZ8A8R5W0iJ8LpWVLve29z41kkoT0BU=";
      ip = "10.123.X.101";
    };

    andrei = {
      key = "qqU4uYImLfUohIwl4KBshPtTINFcs0JVALjbmwpfxRg=";
      ip = "10.123.X.102";
    };

    sergo = {
      key = "qbZGMNIDZFCJC6SHtlyNIlIdGWHELceXClJCcagrj2Y=";
      ip = "10.123.X.103";
    };

    fedor = {
      key = "tEO9r8+jTpu8TBRmZ+/v087IgD/QfmofLUKs249i/F0=";
      ip = "10.123.X.104";
    };
  };
}