break out some network configuration

3 files changed, 35 insertions, 0 deletions

diff --git a/modules/default.nix b/modules/default.nix
index 081a3d9..6c71dbb 100644
--- a/modules/default.nix
+++ b/modules/default.nix
@@ -8,6 +8,7 @@
   imports = [
     ./desktop.nix
     ./doas.nix
+    ./networks
     ./nonfree.nix
     ./steam.nix
   ];
diff --git a/modules/networks/default.nix b/modules/networks/default.nix
new file mode 100644
index 0000000..dfff6a4
--- /dev/null
+++ b/modules/networks/default.nix
@@ -0,0 +1,3 @@
+{
+  imports = [ ./evilvpn.nix ];
+}
diff --git a/modules/networks/evilvpn.nix b/modules/networks/evilvpn.nix
new file mode 100644
index 0000000..95e981a
--- /dev/null
+++ b/modules/networks/evilvpn.nix
@@ -0,0 +1,31 @@
+{ config, lib, ... }:
+{
+  systemd.network = {
+    netdevs."90-evilvpn" = {
+      enable = lib.mkDefault false;
+      netdevConfig = {
+        Kind = "wireguard";
+        Name = "wg0";
+      };
+
+      wireguardConfig = {
+        PrivateKeyFile = "/etc/wireguard/${config.networking.hostName}.key";
+        RouteTable = "main";
+      };
+
+      wireguardPeers = [
+        {
+          AllowedIPs = [ "10.6.6.0/24" ];
+          Endpoint = "www.eviltransgenders.club:51820";
+          PersistentKeepalive = 25;
+          PublicKey = "ChnzJG0HJcgk3OhgTzoPZ9EOyhuCH1EAknaQ9VF7N0I=";
+        }
+      ];
+    };
+
+    networks."90-evilvpn" = {
+      dns = [ "10.6.6.2" ];
+      matchConfig.Name = "wg0";
+    };
+  };
+}