mirrors/nixpkgs
1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-05-11 15:27:02 +00:00
Code Issues Wiki Activity

wireguard: preshared-key is now an attribute of the peer

Browse source 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
This commit is contained in:
Jason A. Donenfeld 2017-05-09 16:58:39 +02:00
parent 00712bf472
commit 6e50243d98
1 changed files with 13 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
nixos/modules/services/networking/wireguard.nix
View file

@ -27,18 +27,6 @@ let
description = "Base64 private key generated by wg genkey."; description = "Base64 private key generated by wg genkey.";
}; };
presharedKey = mkOption {
default = null;
example = "rVXs/Ni9tu3oDBLS4hOyAUAa1qTWVA3loR8eL20os3I=";
type = with types; nullOr str;
description = ''
base64 preshared key generated by wg genpsk. Optional,
and may be omitted. This option adds an additional layer of
symmetric-key cryptography to be mixed into the already existing
public-key cryptography, for post-quantum resistance.
'';
};
listenPort = mkOption { listenPort = mkOption {
default = null; default = null;
type = with types; nullOr int; type = with types; nullOr int;
@ -98,6 +86,18 @@ let
description = "The base64 public key the peer."; description = "The base64 public key the peer.";
}; };
presharedKey = mkOption {
default = null;
example = "rVXs/Ni9tu3oDBLS4hOyAUAa1qTWVA3loR8eL20os3I=";
type = with types; nullOr str;
description = ''
base64 preshared key generated by wg genpsk. Optional,
and may be omitted. This option adds an additional layer of
symmetric-key cryptography to be mixed into the already existing
public-key cryptography, for post-quantum resistance.
'';
};
allowedIPs = mkOption { allowedIPs = mkOption {
example = [ "10.192.122.3/32" "10.192.124.1/24" ]; example = [ "10.192.122.3/32" "10.192.124.1/24" ];
type = with types; listOf str; type = with types; listOf str;
@ -137,12 +137,12 @@ let
generateConf = name: values: pkgs.writeText "wireguard-${name}.conf" '' generateConf = name: values: pkgs.writeText "wireguard-${name}.conf" ''
[Interface] [Interface]
PrivateKey = ${values.privateKey} PrivateKey = ${values.privateKey}
${optionalString (values.presharedKey != null) "PresharedKey = ${values.presharedKey}"}
${optionalString (values.listenPort != null) "ListenPort = ${toString values.listenPort}"} ${optionalString (values.listenPort != null) "ListenPort = ${toString values.listenPort}"}
${concatStringsSep "\n\n" (map (peer: '' ${concatStringsSep "\n\n" (map (peer: ''
[Peer] [Peer]
PublicKey = ${peer.publicKey} PublicKey = ${peer.publicKey}
${optionalString (peer.presharedKey != null) "PresharedKey = ${peer.presharedKey}"}
${optionalString (peer.allowedIPs != []) "AllowedIPs = ${concatStringsSep ", " peer.allowedIPs}"} ${optionalString (peer.allowedIPs != []) "AllowedIPs = ${concatStringsSep ", " peer.allowedIPs}"}
${optionalString (peer.endpoint != null) "Endpoint = ${peer.endpoint}"} ${optionalString (peer.endpoint != null) "Endpoint = ${peer.endpoint}"}
${optionalString (peer.persistentKeepalive != null) "PersistentKeepalive = ${toString peer.persistentKeepalive}"} ${optionalString (peer.persistentKeepalive != null) "PersistentKeepalive = ${toString peer.persistentKeepalive}"}