33 lines
1.1 KiB
Nix
33 lines
1.1 KiB
Nix
# The VPN's facts: one entry per machine, read by every host (wireguard.nix,
|
|
# dns.nix) and nothing else. Keyed by `networking.hostName`.
|
|
#
|
|
# `address` is the machine's address inside the VPN; `endpoint` is where the
|
|
# other machines dial it; `publicKey` is the output of `wg pubkey` on that
|
|
# machine. The keys below are placeholders: replace each with the real one.
|
|
{
|
|
swarm-central = {
|
|
address = "10.77.0.1";
|
|
endpoint = "203.0.113.10:51820";
|
|
publicKey = "REPLACE-with-swarm-central-wg-pubkey";
|
|
};
|
|
swarm-services = {
|
|
address = "10.77.0.2";
|
|
endpoint = "203.0.113.11:51820";
|
|
publicKey = "REPLACE-with-swarm-services-wg-pubkey";
|
|
};
|
|
swarm-heavyduty = {
|
|
address = "10.77.0.3";
|
|
endpoint = "203.0.113.12:51820";
|
|
publicKey = "REPLACE-with-swarm-heavyduty-wg-pubkey";
|
|
};
|
|
hive-one = {
|
|
address = "10.77.0.11";
|
|
endpoint = "198.51.100.11:51820";
|
|
publicKey = "REPLACE-with-hive-one-wg-pubkey";
|
|
};
|
|
hive-two = {
|
|
address = "10.77.0.12";
|
|
endpoint = "198.51.100.12:51820";
|
|
publicKey = "REPLACE-with-hive-two-wg-pubkey";
|
|
};
|
|
}
|