alexion/dev
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor(nixos): centralize VPN controls

Browse Source
This commit is contained in:
alexion
2026-10-07 22:40:00 -04:00
parent f173887228
commit 22bbd5e2b4
2 changed files with 5 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
configs/nixos/hosts/neogaia/default.nix
View File

@@ -27,15 +27,9 @@
peer = { peer = {
publicKey = "sGEkSD+gEdIMXi4PBN3AhwHGc4tWMtcjOIey3s7yb3I="; publicKey = "sGEkSD+gEdIMXi4PBN3AhwHGc4tWMtcjOIey3s7yb3I=";
endpoint = "100.0.90.192:51820"; endpoint = "100.0.90.192:51820";
allowedIPs = [ "10.23.0.0/16" ];
}; };
}; };
registry.shell-shortcut.neogaia = {
vpn-on = "sudo systemctl start wireguard-wg-home.target";
vpn-off = "sudo systemctl stop 'wireguard-wg-home*.service' wireguard-wg-home.target";
};
modules.monorepo.enable = true; modules.monorepo.enable = true;
modules.shell.herdr.enable = true; modules.shell.herdr.enable = true;
modules.shell.gitea-axi.enable = true; modules.shell.gitea-axi.enable = true;

5
configs/nixos/modules/network/vpn-client.nix
View File

@@ -82,6 +82,11 @@ in
sops.secrets.${cfg.privateKeySecret}.sopsFile = cfg.sopsFile; sops.secrets.${cfg.privateKeySecret}.sopsFile = cfg.sopsFile;
registry.shell-shortcut.${config.networking.hostName} = {
vpn-on = "sudo systemctl start wireguard-${cfg.interface}.target";
vpn-off = "sudo systemctl stop 'wireguard-${cfg.interface}*.service' wireguard-${cfg.interface}.target";
};
systemd.targets."wireguard-${cfg.interface}" = lib.mkIf (!cfg.autoStart) { systemd.targets."wireguard-${cfg.interface}" = lib.mkIf (!cfg.autoStart) {
wantedBy = lib.mkForce [ ]; wantedBy = lib.mkForce [ ];
}; };