switched to unstable, amneziawg configured

This commit is contained in:
bogale 2026-09-17 23:30:14 +09:00
commit 26d383ea96
10 changed files with 110 additions and 75 deletions

View file

@ -13,11 +13,16 @@
"/boot" = { options = [ "noatime" ]; };
};
swapDevices = [ { device = "/var/swapfile"; } ];
boot.loader.limine = {
enable = true;
maxGenerations = 20;
secureBoot.enable = true;
panicOnChecksumMismatch = true;
boot = {
kernelModules = [ "amneziawg" ];
kernelPackages = pkgs.linuxPackages_latest;
extraModulePackages = [ config.boot.kernelPackages.amneziawg ];
loader.limine = {
enable = true;
maxGenerations = 20;
secureBoot.enable = true;
panicOnChecksumMismatch = true;
};
};
users.users = {
root = {
@ -33,24 +38,25 @@
};
networking = {
nftables.enable = true;
#networking.wg-quick.interfaces.awg0 = {
#type = "amneziawg";
#configFile = "/root/secrets/awg0.conf";
#};
wg-quick.interfaces.awg0 = {
type = "amneziawg";
configFile = "/root/secrets/awg0.conf";
};
networkmanager = {
enable = true;
ensureProfiles.profiles.home-wifi = {
wifi-security.key-mgmt = "sae";
connection = {
id = "home-wifi";
type = "wifi";
ensureProfiles = {
environmentFiles = [ "/root/secrets/wifi.env" ];
profiles.home-wifi = {
wifi-security.key-mgmt = "sae";
connection = {
id = "home-wifi";
type = "wifi";
};
};
};
};
};
environment.systemPackages = with pkgs; [
amneziawg-go
amneziawg-tools
sbctl
];
services = {