wireguard!

1 files changed, 47 insertions, 1 deletions

diff --git a/hosts/the-meowchine/default.nix b/hosts/the-meowchine/default.nix
index 623e094..4043a93 100644
--- a/hosts/the-meowchine/default.nix
+++ b/hosts/the-meowchine/default.nix
@@ -5,6 +5,10 @@
   ...
 }:
 {
+	environment.systemPackages = with pkgs; [
+		wireguard-tools
+	];
+
   home-manager.users.rosa = {
     imports = [ ../../modules/user ];
     desktop.sessions.sway.enable = true;
@@ -31,7 +35,11 @@
     };
   };
 
-  networking.networkmanager.enable = true;
+  networking = {
+	  useNetworkd = true;
+	  wireless.iwd.enable = true;
+  };
+
   programs = {
     gpu-screen-recorder.enable = true;
     steam.enable = true;
@@ -44,5 +52,43 @@
     stateVersion = "23.05";
   };
 
+  systemd.network = {
+	  enable = true;
+	  netdevs."90-wg0" = {
+		  enable = true;
+		  netdevConfig = {
+			  Kind = "wireguard";
+			  Name = "wg0";
+		  };
+
+		  wireguardConfig = {
+			  PrivateKeyFile = "/etc/wireguard/the-meowchine.key";
+			  RouteTable = "main";
+		  };
+
+		  wireguardPeers = [
+			  {
+				  AllowedIPs = [ "10.6.6.0/24" ];
+				  Endpoint = "51.79.54.109:51820";
+				  PersistentKeepalive = 25;
+				  PublicKey = "ChnzJG0HJcgk3OhgTzoPZ9EOyhuCH1EAknaQ9VF7N0I=";
+			  }
+		  ];
+	  };
+
+	  networks = {
+		  "89-wireless" = {
+			  DHCP = "yes";
+			  matchConfig.Name = "wlan0";
+			  networkConfig.IgnoreCarrierLoss = "3s";
+		  };
+
+		  "90-wg0" = {
+			  address = [ "10.6.6.3/24" ];
+			  matchConfig.Name = "wg0";
+		  };
+	  };
+  };
+
   users.users.rosa.enable = true;
 }