|
|
@ -155,33 +155,33 @@ pass data into user defined Configuration Modules. Most users can ignore
|
|
|
|
1. Make your ACL according to the [ACL Configuration]](ACL Configuration) section.
|
|
|
|
1. Make your ACL according to the [ACL Configuration]](ACL Configuration) section.
|
|
|
|
You can look in the `examples/acl` folder for examples.
|
|
|
|
You can look in the `examples/acl` folder for examples.
|
|
|
|
2. Include the module in your flake config:
|
|
|
|
2. Include the module in your flake config:
|
|
|
|
```nix
|
|
|
|
```nix
|
|
|
|
...
|
|
|
|
...
|
|
|
|
inputs.wirenix.url = "sourcehut:~msalerno/wirenix";
|
|
|
|
inputs.wirenix.url = "sourcehut:~msalerno/wirenix";
|
|
|
|
outputs = { self, nixpkgs, wirenix }: {
|
|
|
|
outputs = { self, nixpkgs, wirenix }: {
|
|
|
|
nixosConfigurations = {
|
|
|
|
nixosConfigurations = {
|
|
|
|
example = nixpkgs.lib.nixosSystem rec {
|
|
|
|
example = nixpkgs.lib.nixosSystem rec {
|
|
|
|
system = "x86_64-linux";
|
|
|
|
system = "x86_64-linux";
|
|
|
|
modules = [
|
|
|
|
modules = [
|
|
|
|
./machines/example.nix
|
|
|
|
./machines/example.nix
|
|
|
|
wirenix.nixosModules.default
|
|
|
|
wirenix.nixosModules.default
|
|
|
|
]
|
|
|
|
]
|
|
|
|
|
|
|
|
};
|
|
|
|
};
|
|
|
|
};
|
|
|
|
};
|
|
|
|
```
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
3. Configure wirenix in your nixosConfiguration (`./machines/example.nix` in this
|
|
|
|
3. Configure wirenix in your nixosConfiguration (`./machines/example.nix` in this
|
|
|
|
case):
|
|
|
|
case):
|
|
|
|
```nix
|
|
|
|
```nix
|
|
|
|
wirenix = {
|
|
|
|
wirenix = {
|
|
|
|
enable = true;
|
|
|
|
enable = true;
|
|
|
|
peerName = "example" # defaults to hostname otherwise
|
|
|
|
peerName = "example" # defaults to hostname otherwise
|
|
|
|
configurer = "static" # defaults to "static", could also be "networkd"
|
|
|
|
configurer = "static" # defaults to "static", could also be "networkd"
|
|
|
|
keyProviders = ["acl"]; # could also be ["agenix-rekey"] or ["acl" "agenix-rekey"]
|
|
|
|
keyProviders = ["acl"]; # could also be ["agenix-rekey"] or ["acl" "agenix-rekey"]
|
|
|
|
# secretsDir = ../../secrets; # only if you're using agenix-rekey
|
|
|
|
# secretsDir = ../../secrets; # only if you're using agenix-rekey
|
|
|
|
aclConfig = import ../../acl.nix;
|
|
|
|
aclConfig = import ../../acl.nix;
|
|
|
|
};
|
|
|
|
};
|
|
|
|
```
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|
|
4. Profit
|
|
|
|
4. Profit
|
|
|
|
|
|
|
|
|
|
|
|