You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
74 lines
2.2 KiB
Nix
74 lines
2.2 KiB
Nix
/*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at https://mozilla.org/MPL/2.0/.
|
|
*/
|
|
(import ./lib.nix)
|
|
{
|
|
name = "mesh connection";
|
|
nodes = {
|
|
# `self` here is set by using specialArgs in `lib.nix`
|
|
node1 = { self, pkgs, ... }: {
|
|
virtualisation.vlans = [ 1 ];
|
|
imports = [ self.nixosModules.default ];
|
|
wirenix = {
|
|
enable = true;
|
|
aclConfig = import ./acls/mesh.nix;
|
|
};
|
|
networking.firewall.enable = false;
|
|
};
|
|
|
|
node2 = { self, pkgs, ... }: {
|
|
virtualisation.vlans = [ 1 ];
|
|
imports = [ self.nixosModules.default ];
|
|
wirenix = {
|
|
enable = true;
|
|
keyProviders = ["acl"];
|
|
aclConfig = import ./acls/mesh.nix;
|
|
};
|
|
networking.firewall.enable = false;
|
|
};
|
|
|
|
node3 = { self, pkgs, ... }: {
|
|
virtualisation.vlans = [ 1 ];
|
|
imports = [ self.nixosModules.default ];
|
|
wirenix = {
|
|
enable = true;
|
|
keyProviders = ["acl"];
|
|
peerName = "node3";
|
|
aclConfig = import ./acls/mesh.nix;
|
|
};
|
|
networking.firewall.enable = false;
|
|
};
|
|
|
|
node4 = { self, pkgs, ... }: {
|
|
virtualisation.vlans = [ 1 ];
|
|
imports = [ self.nixosModules.default ];
|
|
wirenix = {
|
|
enable = true;
|
|
keyProviders = ["acl"];
|
|
peerName = "node4";
|
|
aclConfig = import ./acls/mesh.nix;
|
|
};
|
|
networking.firewall.enable = false;
|
|
};
|
|
};
|
|
# This is the test code that will check if our service is running correctly:
|
|
testScript = ''
|
|
start_all()
|
|
nodes = {
|
|
"node1": node1,
|
|
"node2": node2,
|
|
"node3": node3,
|
|
"node4": node4
|
|
}
|
|
for local_name, local_node in nodes.items():
|
|
for remote_node in set(nodes.keys()) - set([local_name]):
|
|
local_node.wait_for_unit(f"wireguard-mesh-peer-{remote_node}")
|
|
for local_name, local_node in nodes.items():
|
|
local_node.succeed("wg show >&2")
|
|
for remote_name in set(nodes.keys()) - set([local_name]):
|
|
local_node.succeed(f"ping -c 1 {remote_name} >&2")
|
|
local_node.succeed(f"ping -c 1 {remote_name}.mesh >&2")
|
|
'';
|
|
} |