summary refs log tree commit diff
path: root/assets/vpn.nix
blob: e30438b0cc40ed650a50aee47a1ddc239651b8e7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
# shared vpn definitions for wireguard, used by both the tunnel
# and the plain vpn module.

{
  # the public key of the shared wireguard key used by all vpn hosts.
  # the matching private key is the secret `wg-private-key`.
  public = "s5yyPCJiN0uqW0jzKIbYCF7I9TthymiRzpNt466XeWk=";

  # users allowed to connect to any wireguard-based service.
  # their ip is always a template, with 'X' representing the
  # network subnet they are connecting to.
  users = {
    mel = {
      key = "vnZoHXapCLLUhZ8A8R5W0iJ8LpWVLve29z41kkoT0BU=";
      ip = "10.123.X.101";
    };

    andrei = {
      key = "qqU4uYImLfUohIwl4KBshPtTINFcs0JVALjbmwpfxRg=";
      ip = "10.123.X.102";
    };

    sergo = {
      key = "qbZGMNIDZFCJC6SHtlyNIlIdGWHELceXClJCcagrj2Y=";
      ip = "10.123.X.103";
    };

    fedor = {
      key = "tEO9r8+jTpu8TBRmZ+/v087IgD/QfmofLUKs249i/F0=";
      ip = "10.123.X.104";
    };
  };
}