add IPsec link to wes

This commit is contained in:
Michele Guerini Rocco 2024-07-06 15:01:36 +02:00
parent bad0deb8e5
commit c8e3d63d41
Signed by: rnhmjoj
GPG Key ID: BFBAF4C975F76450
3 changed files with 92 additions and 66 deletions

View File

@ -55,6 +55,7 @@
];
firewall.allowedUDPPorts = [
443 # dnscrypt
500 # ipsec
53 # dns
21027 # syncthing discovery
64738 # mumble server
@ -439,6 +440,27 @@
(bindNginx "/var/lib/asjon/tree/report" "asjon")
];
### IPsec mesh
environment.etc."ipsec.d/mesh.secrets".source = config.secrets.passwords.mesh;
services.libreswan.enable = true;
services.libreswan.connections.mesh =
''
leftid=@wes
left=2a01:e11:1001:53ea::1
rightid=@maxwell
right=2001:470:c8e8:0:230:48ff:fefa:91e1
authby=secret
type=transport
auto=ondemand
failureshunt=drop
negotiationshunt=hold
'';
### Misc. services
services.asjon.enable = true;

View File

@ -1,66 +1,67 @@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U2FsdGVkX1/nq5r1BVTsdStBBh8D6Yi9VfVJIHCJHzAZ5rbTWx2r/ZXrjzw7u7ZN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3
secrets/pass/mesh.pwd Normal file
View File

@ -0,0 +1,3 @@
U2FsdGVkX19/kwiv3qT/dPLvt7EyuI9Bq8A8G3EPIHDqAOZNBnVpjoYL5Lohhjn1
rAlHir5QMigMm6nNBF0dIYh4vIKyWtD4g+6btiagcke3MYCtcz3zVdeZdzpVOHvP
tRoTA9ZQNw==