diff --git a/configuration.nix b/configuration.nix index 4e83613..98a33f8 100644 --- a/configuration.nix +++ b/configuration.nix @@ -55,6 +55,7 @@ ]; firewall.allowedUDPPorts = [ 443 # dnscrypt + 500 # ipsec 53 # dns 21027 # syncthing discovery 64738 # mumble server @@ -439,6 +440,27 @@ (bindNginx "/var/lib/asjon/tree/report" "asjon") ]; + + ### IPsec mesh + + environment.etc."ipsec.d/mesh.secrets".source = config.secrets.passwords.mesh; + + services.libreswan.enable = true; + services.libreswan.connections.mesh = + '' + leftid=@wes + left=2a01:e11:1001:53ea::1 + rightid=@maxwell + right=2001:470:c8e8:0:230:48ff:fefa:91e1 + authby=secret + type=transport + + auto=ondemand + failureshunt=drop + negotiationshunt=hold + ''; + + ### Misc. services services.asjon.enable = true; diff --git a/secrets/default.nix b/secrets/default.nix index 4259a5d..e90463e 100644 --- a/secrets/default.nix +++ b/secrets/default.nix @@ -1,66 +1,67 @@ -U2FsdGVkX19XCACEufEt5M4bXKrEZbc3uwl9/RfxrTWPGRc+9wq/lObPINAaiVJ5 -6RC1WdLmXBnubDqxvvf4Oont7clL3Uf2YlJTvKQ1ybnPOLDG49PXQDS45vjktTf3 -Edl/a9vHj43WbZB/ZRFwcQmPXlGkF/H4wl1Ab44nvTXmIna53kkK6qjpj8gk9BrJ -qDzyGjtdpZ2IQi1niPZFuTHb/ZYEK/7KVDABo13HL0A02C/tQE8g+oT00BJUKyl2 -4P94Q9lVfqAjMzjIV/yp8QjDh6kQsM6I0Nc0Gyqjjhf8ppdYkeYtqiboaoaxksEU -LIwyyFV+aqlFGAVdYv8d5TaAoJ+B7+Szw284uGkKOBb78GV4SBBIpe7GlOBcX4+v -hI2F0HXTcaBg5lO6Z9SS79GeJcbKliu2mAp7hrdSs+gBjPoClxFGgVY7lac3uVW3 -03HptqLB5Dtu98vG/iazEdyxGERYL0HF9pGpCGNCnSmWoR7LOGdNvcI0h5nHYOeB -4ml+UCak7j8mLMU8ldnvrEIZTfLImnMothXc+oW33sNV3AfnlOGpM8bztHmAbB7U -1dw+H3ig+eXVtpJ6swSFo0+TepJmZjRGjfpTyLhljnyDavIZk79RkijzzrThWcV3 -joUEk95G26i4+xhDFsbGzriLlLg7rsvxESPdzimfqfO74+jsFxIvlua1DKf9PtvX -2wobnqhEjDJN2EGvH7j2gK6XUTmRoQwIs7cEETiDg0h3kiiAi6MDCvD6qVSvdIQS -IfHpOGLYaPR3lZDrvzJtYANkLoXVZ9Mb8laJ9gtAq+Hnvu9Wt3Xe8YrA6S7fF01B -3PHB7Is4haDwFKSsxHTUhZ0dkaAPe2W45iA5irxrZ8wncvyM1ecoE5M8Lvz8hh2k -MN5FxscGcQps4jVr0wg+hfyOK7r0P+spyLX0IbvxzTA7gUUrJFpHVYmrWU/MM6ft -2YstGLSlR1Z1roYFOhCgJzaq/waKClkdS43zEIG5Xyz8LiYQX/M+WijXHlRs1WwH -/2i04Amc6uLzXr1uXJBXtK4ZmVLu+elJqZhXQxRmLp+ioUr+Wdoo6lF8XAi7RwTV -1nlk72qXRpb/5l1G8SPykrUFc8E2chqs+0OcRGIi4cKuYPvYTxboSl3nkG8v5UBr -KZbw6My5gfSyw5ykZdxdec1l0hv8cRcuVpVwnUNUclSbGIrOrYtTxsVhjtmYw2gE -GOn0iRBbe7pD/q6959VdWmOW1uy2jTOUt5VeOmMAG1MQRcxAlIaDDICzgiD6bWLU -w4PMwRf5kN/V+GHPdgI3UoKyI3enwDXUtXMfKp65nid28p5sEBYKzEQSxFD5xwlp -eBjelqcJXatIbZyyjmbs0lw+u9IYfIbLzR5CzR33JQDM9gdmbAIEX6RwEcTLpeYq -cdmB8Lo/RkbWXUoqM9kHVBSWBPtKPkQ/zt+njVOFW3x+BJiGKX0GfrDMQDewnRKN -jJbMLDQXnUPp38M13qltypW/fDvUcWKbTX1OXIFj4eZMw9487GfvCtZd4UjPDLop -cScZVq93GlKd/oSYQM1KcGXANtj0br1xnwYXs+bdMsO7Y9Ae54S+IR1M+WaqtcG2 -uJt7lJIx+7rFJJE13j/nZwcwfKGMv7XxRoHxOI43MW5MSD1IiXgsZ4g1B59NZhDR -rgDIT9PPA3UK2e28eGAbQVRWriKLUjlkuEa0ecjH8dR+kHuwX+eBhl5f72Ww9/EB -Wf9Xkr+WsM5Xbh4bEHSM2tUVzFj8T0lyw6mgnI3fF09g0sfNZALNvleF516B7H0k -bmnL8bBAQiv4k+7WO5+Oj6F+yzuMstjx7nEEnahKUBH8UNH863Q7cYawD0CxtptH -hdafWlW1CaWlz4YXK9xCxRtQPHJVjI9mMpPReWu6yZeontIHv2l8eyDGurhQH2+p -hRFcrjdNwjQPPCcvwDRygGgsBukeaAgF+Py6mOujNAugoSGfPVfgJ9Vi4kSx7e64 -j8wZ2iph6pEE0f8jxjFj0CJicLIn/4BIFlF84RfWC03HUz7oCyejDuS+8lAyKtNv -zVm0NANr/2bQj/wXihVhuYi+nHYnXZ/nHXhYT5ojiaGI2MSmb1kIDi8gyMnDGb82 -+QzzhfNr0GqBzxKas1b5WDgb/yMAFOs6mRXwdRhjpaFl3nBDMlRBf/LAHcCRyQgv -/Rm0esZnLkfzvyevclXJ5OlvGa5YFSGIpjvbLWw0rZvcWhdIPiSE1iViDQVwu3xd -zNmfGQvw8nVd9gbvkbYDRn0IraWpXMdSiLJKBmBpAh3vQq9EV7386MKDNeLRtxSs -fA8OHnM8y5javN7b5vSqcEoOrCVXtC1SHdq5L5pcYxZx84MnlibzDMQevusxYY1/ -t14MZoZcAUiA3dnNaco/GSh6MOWvbfr68qomXhQjZyzq3vgz7CIWgOhqkjILvbzp -xc5Kn6vrw43vDXum6uuOFuHGDjZc2ArgUQBkhtB8y7DIPe+gHlKy0XbvKj2T9mrT -ig/jR/Z+WkcI7mZK15DKT5zjuG0DPdCHdni+v0pDKIjH4z+H5wxwGSwA5v57i9HG -6tMJAj1R88jLqKxMvZD5ggB3vyfYf6djJNG915RO8rNJRgwhHT6xU0ozrc6bEgTY -K0jhpDM7Zleo8Z1E7pM2C/OSdkwIMxiO724mO7E8MeeWIYuEVA4oWiEQlwG53/2B -Yql/Q4IkYNXFPBXvT0La0utNO/ipjV0Z8iRnj1++RB0lQrScnMULza9Qm8NWLZHZ -2Ox/427/xk4Rm1r87D1DM/pFM+WAHFx9L9sXbNLZVyxAOJ6OC/6IFPop2JgAIRJC -9qulboMiR1ns2CPWF0ryueA9vvZoE46ey7lG/LsF79K/lS7jxi5bz9K7VXG6/eBo -Q24MZEfoljgwDTbMh3uOYvSHn0XtrYYgKl+ZSYjemAqDEKhavDjNvSKLEvnAhyF9 -+h9TFGGtcfntE8JC2Xj1UtRrAM5CWJ3K7VFKnLBecPnnuylYVzFv5IDfxA/dMcv8 -ApbRHFMd3q9/0GK81ydYfs37VsDBzhvknb1LBWaC546ZUcEt0knt4iWHKvZNC3BQ -bL7ZZ5SZjMh5azTGDXRPBHKTpqbh133mCH1eHtiYVLDOvvdcrShs+WuXcXi3jopF -RxSI1Jx8RhHFFvN3DigymLd7APFoXZzjbzkp6WFJT+mwo9WDkbtU3jhAwLncfSWI -j9o8/Gj8mggFfhMhFAmNtm2Hpwfi2ZhYRMJIqiGxVhpHTvfMxaIoQA1ixFfUyu7k -Z8VG6PH/JgBaxSRygGDMc93Vbb5pnj95+Zr5XzwCvChDwKW/2C3yVbO09iR4PoTY -FWeJ3eYFeYlrmlphTknrUWRD2HvALvkgbGlglWElmtHxVX7B2ke7/fKW9Nef9PTb -SRKeHikFhBM61Q4NzbkdZVjOrM2XhCw7EQZiNBIgGm9Uo996lp5aghxSQ3KhWtUQ -phGvjqOVTmTIulFMVs8pVD5+E+8ympw0wGD9YlbyYrkeqvv4acU9yvZN6aXH25mX -HO3RN3S6zwxwAneBasRcnNJggdBOJwFR4Me76xo4tZeFJwEzL4ILSG+hSFDUkHit -lE75BOcqwBs30KafoAYpDKdBLbfJemvs8PuPH8XGJn9yeBL1QdDoSerAbucUvVXP -Px+VtKjaIU+ejmfFCuCr89r3L3Admkix55AUT9BAEQbwbfbMhG6RHF/AvYKIVRHg -WLdTzOQV6QCpw79E8uj4fQVsXhvt7pXwBgJiEJIdGm1/8VKzEr1O+k6SNvzRd4MA -bu0RIKILcObiErfyOWgYrwzo+EkYsBAL1AI7NJUUFlxnKY/ZjUq1nuET5nA1q/Tp -ZcwfxGfUD7Bp4HbpZADLCGyI57SIZ4l1e04SBL6htPmZl4JOFnT4x9VDjtmw4uZ4 -dfNhMdTT9TPjEh7+krCLUXCbsPJfaze0sE2jQq2dGwK0vU3OcgQQAPME2mix6BeR -3eK4kqk1F8rjsGoqTvT4HumVEsn9CcRrbBn/0F0eVvVMTfsNZGaGzo0H2qHmoU19 -3lsW+1yKg94RUJ+TlpnZ3gEgS5jUh4NirXt3UibhH0TxsidqMjqyZmgh1debiMBK -nwLo+u6NWn33VuH7TUZLyfPs5wPyVgDmboYPuZE1L+45gEJVX5U5sXM/5JtvsUmK -cA== +U2FsdGVkX1/nq5r1BVTsdStBBh8D6Yi9VfVJIHCJHzAZ5rbTWx2r/ZXrjzw7u7ZN +kQsRXP/4vpP89IgEblly8uQYdbgkpdT3LQBHke9lCxGF0TneQTgTqGxKZOpCWkNV +ikGX3u8ROYJizOpxxG9r/dPtxioKMTuAYIzYHhgtlbMKvgnalX7LuXCRo1XWfJ5p +yt58x0JI7ji4R8r7q8zrTqHWg2SOYFKTRL1p6xhmUa2vLbvg2LFT7rRWLmfothkK +0rZAxP1Xo4EC3BvaIYusGXh6co7X3tQDrYLtaozuTSlJqMMT60iua69oIbmz6M3U +VuYz6cMPnwDFK/yCM/WnM8xcbm8ek81luTqcBYFMXzjRRXOfoReyYXw3FaF20a2y +y5fLXBy7+U9VSgWwIgJLJadaDxkxr+ovyKuGzMCieuqm856BwYRWJp+P2/Ik0Zhw +2GCjR3Z5eVCZYwCiNaA7QUrNt7vXzBjj+lMk5/65zwuJ1EIp3XvQLPbv0FBMc7nB +ztvHcj9XxLV31CNY4fU1NIggxdNF/2Y6h5uCqIpmAQzDVWpcfTDvJrTLdvT7mCLY +ZUnzcG1KPt2oIkQduO1tU1zBEP99wgXcVdB13Vn5ZWvlafhq4kVG+l2gtyZtldlw +kZ+psem6w2zREx8+Ow0Ga9M2zCs9JNROXmLTFaOTFOfh6WpnWR+xxGo21DlgbwXp +RaKvaJ0j0FiSinXzP7SBU+eTsTx3Mj1Dcn6IId6PfFG0lslxFcCeijy4sigU0QHM +oYmP+g8crcAoRFzCJqFEj1HwbNrF6hejt2w0Agwo+GnakeGUvxu7+r45cu0BgJWm +hJgoPOkErWeqHOaM3xM9QRS3qcHeOWN8b9eCeBAVUK2qNfEB4S+YjJhyjEY+eD4+ +VshudyKsGDgxYkuYGuz49UqhEQgn3sqR56jtEWSkxVwZ1kxr/XkLclT2KhzU5nOi +QSCnQnfrBB0T6Tvg0xBCDzGFTYaVXmVuMn4sfnqqOYJY1jgpy/zXegFvauGqtoN2 +3nxYehXafHEazcSxJXOAXWGURfuvHsxLXsPqjLPva5T5px4J7oM5vc0+ACeyrU8D +LdVIZMmtn5UaK+JnnrhLPvbe1RwVKY7WuXCZ5yh6r1OhRswsMcNAYLs2JAg+eqvb +wra1hHH8pAO2LSxQZ5aB14PN82161UXQ4c6TootvXYlLQnKxTndUZyaz8JvGZptZ +EdHcXtD/otB4fjfQClj+TF6jfinPAheoCwrTbErYjH7WWDUMPUIT2t77peY1ieXU +xasx/+i7dtRepn/WTPB6HbhQG4e56RYYbibeKRW3UXUcXjuI2pyAD0IW9aq7Sy0b +s5GwH8WSElaZAwsaOCt4p+LykyxK8csWokRIGjWOKQf/rNMgkYBu4mr38dR6rzj8 +sGu8z9WfaxSwF+mqWa8id1rOyxsfeXKniTsZhuYQ8WHOI5QRn+IWBaS4eP8SnCNm +Fc0Qil5/0iYu9u7kIRsfjHghXxVbHdFIWF2FZDWe1bVnDrxxzRKg0SIWj/ecYVzd +mPV/x1qpOeNvERNdf/ltq72q/TND1HQHu/YYLb1WH50mgcopeuSt5zuQiUhltLIf +kZplCic7vk3JPiiyA2rI7f4Tm7YZlTpupJcJytkmo/INPJUHDzjko8EZZ6dzceqQ +SZB3OZR9BPnqJKd1AOZSN8StEoJcpcr1vNLVgRg8D+I6W/n9ClQBpCz/hhn8ruRc +SJAU8IghHgfQPQ2pyuvVhpSobrFtWz/36jTuxNUo/Jsd2f7TWy3IX0taimCxBlL5 +8rqefN8EHGa9EYRmnr9E4yK16CjjxyDk3IZeWxb3KRlfW0zfbqNQ2FJdAPA8ViYZ +EqHJFUxIGuWUKelp3YW2RUMfHtNTqrEQJytoTRVL7trY+u4g5TypdAXJ/LvRhAWk +3Oxpzq/+zpJ8x0FR7ZguqcIJaysFWFTIoAqkH8Z1JkZ3I1VGXqVUFY+1tlqDFtAY +7sk7InsLqVCaKt392Vxl4vhkapNjNLlJbYVb3QwJhvFDwRktBYfdLLTIjh6iGXRn +PPmjKW1eCQ1KWuLrndEcB+Ai9JccoDmxdm7Avgu2gikGeYswt1gekKL0zSxptxJt +48TfsC6jDxaezHN9P4dDszsMEU6xsyro8WpkQCojcuSkduP2xhxrLUmC/bn2/VNv +R6yyiAGOMCzKGWQh+w2PpmMlHLNNm8y3Hs11YtKkMcxLP9+wNJWcZ9ydqkpBwr3Y +6UZf+5aZxe2CUDSYRTNKc6jYEnYeoHoQs2fge0iHwfOGyMsjxiPk0yTuzRGWFlTB +XtAvkszQpxyXBPN5b8W038n8sOCArSb5Y+GsglZvVuG3Q0C9XvT2fQSjlMSLPVpT +hnUuzcyemPZAn6z0fR5lD+oe+LQWJro1aW/Om5WrsWIXrUfgTggJzUdhQIxqK9b2 +tO7cdG5lk0voR/GEZv4S7/OjaNgANUGx85mv78d63prdRP7eZbCJ8Uqe9rHKLv2Z +EClRnknkYbivBxVkY4PBUIgXLJpd7W7QtiXsLD/tOE46xRIc9nVjtfO4vqgUdyg9 +XL0xlprIB16q4uu5qxvPvIdt4QIKV5RlhoxP5gutqC/b0Tp2nQ19PmGuxlstHz5B +mrWlOINWsKdOgV/+6lhCr+VAWrJ3bd6RSQtWY8cp/+i0HJbZAmnHKJ1gY5Raryi+ +3tAU5lSuYjys1veB/gE2eP0IZHSXTul2YbbMTOqmT+5oreKZP3AvvhfVGtl1BfKh +vI2p4BEcocLalpkzfbxznI9bWwV2PtI3VjL0l1py/B71qTVUgwK624O4ZcMWhXMN +OojlTkBvvAJn2LjNxOvtvNYWw3SLhbH1H5+108sAZxI6PSkXNVJCfq9V5ZCS7Ulu +4a5/4HsSDlTxJULbAcXFWY5nMjsJrG+oc+enMVeGMn5pfdXIqm2c7QfrVbE53U66 +uzMreQFA5KZknx5rSIwvoSrk9K1b0RuHD6e0pHd0UgjJHomeSnp3ABZDby/lfREC +OXrCnbUgeLrNbgtr3Q39Lau2TyVC2aaS/7nkcHjYMO5UZo0natRIIRnA7Nr42LOJ +d4y9CeZIADiR3Ig4iYrkaYu0Bpw86jofI6MgnB05ENZEyOOHJl5jMuwVbozrvYH3 +zRI0Yu5AYKukE5jnY2mVg4Prt+wgpTVO1Nccu8JslhZj5phskJ5lVvLxEH25Hsx5 +HX2PUy3HZbDcy8aKJClWOtJdS9y8g/VeCO5UUb8P3BqrtTswMCLwIHobyfWX/v7j +kUHsXntGarR4EMpd1cAPvqnTI4zrf0wHRdpZ1CMWd9V/wH2qn4UuGqTP/14n4oOA +XoFN22fDhkZWspAP3DfaLZHjn/2HMFkl1wdzjaKOetIV3oXH2TEW1IAGK+w1sfeq +TLdCDDASymkB5/lDvOR8zteH2ZeJYNvcULl0z4WjgzWuiEvF/iZ5PtJIHpeI1Zyl +0HLTmT9AUIj5VHJ209ggJxcO+EvGr9WdmkEtVPH6dCoCDvKK9OwkWXMEC5hoZNx0 +CIMUJA8Jv2FyOIZZfLYdAupTQjy7cNBnVOfv4V9hurwBA86ZFjDllfDrPn0Fs7Et +tKsJunBJwLgppMcpEShfJWDvH4hxdgVpupq20a1V8DvojB+5mRc+bobi8XEGmo68 +04P5D/aDocuVVTZApivGpiDg7tBkSYSsDP+lU3oSHyCCfDevCKiFRgcsQMLtbx1x +oZ65us8MXXWuRTrhAcFDCt91HKD+gTddxzX6Yn413nUXMNi9al0KnEn18zETuazU +FDwki40zyaZrvMYZTIWqLkqfkjmdHA+WlNNXUYZL0RiMbrmGXl8A4OYHX4HEa3jM +0C/8GmmDYwx1BQ3Tqu13DF45/TiybCWTtSvArApujvWI1KG8ek/LsVw42mkzju8J +itR1+SdCDtY5OOtluwlrx1yBQMKbEW/1jqol/qGqTXgKyzcEGeoPcKTtSNQcXoYY +IkpCh9u7AHEL9Tdpyk9oIMnzfnBDDJaU5hK2Myek0GdH49jUPaDTnSqY0zN6aKi4 +CPmxvedHybEwMrPLEVUFpYT8EEXbJXPvC3qDN9iH4U8fEgkG0QP/bvb+iEAbgx3u ++CGCZtcp08dv0+cn5Bh7S8623vz10jt/txj23TvRlli/mt1UH7Vq9H9RroIMEd2I +etYUc/lNHKmCd8ekIOuq2oxk9j2uEqQv4s5jQKbIWfJ88VgNRMzlRNRTlkUpYI5C +7aANIfr8nbLdMqJ3f68= diff --git a/secrets/pass/mesh.pwd b/secrets/pass/mesh.pwd new file mode 100644 index 0000000..c432a61 --- /dev/null +++ b/secrets/pass/mesh.pwd @@ -0,0 +1,3 @@ +U2FsdGVkX19/kwiv3qT/dPLvt7EyuI9Bq8A8G3EPIHDqAOZNBnVpjoYL5Lohhjn1 +rAlHir5QMigMm6nNBF0dIYh4vIKyWtD4g+6btiagcke3MYCtcz3zVdeZdzpVOHvP +tRoTA9ZQNw==