servo-vpn: resolve DNS through the VPN
This commit is contained in:
@@ -38,7 +38,9 @@ let
|
|||||||
endpoint = config.sane.hosts.by-name."servo".wg-home.endpoint;
|
endpoint = config.sane.hosts.by-name."servo".wg-home.endpoint;
|
||||||
publicKey = config.sane.hosts.by-name."servo".wg-home.pubkey;
|
publicKey = config.sane.hosts.by-name."servo".wg-home.pubkey;
|
||||||
address = [ config.sane.services.wg-home.ip ];
|
address = [ config.sane.services.wg-home.ip ];
|
||||||
dns = [ "10.78.79.1" ];
|
dns = [
|
||||||
|
config.sane.hosts.by-name."servo".wg-home.ip
|
||||||
|
];
|
||||||
privateKeyFile = config.networking.wireguard.interfaces.wg-home.privateKeyFile;
|
privateKeyFile = config.networking.wireguard.interfaces.wg-home.privateKeyFile;
|
||||||
extraOptions = {
|
extraOptions = {
|
||||||
# wg-home and vpn-servo interfaces interfere with the result that when connected to both,
|
# wg-home and vpn-servo interfaces interfere with the result that when connected to both,
|
||||||
|
@@ -83,6 +83,7 @@ in
|
|||||||
{
|
{
|
||||||
listenPort = 51820;
|
listenPort = 51820;
|
||||||
privateKeyFile = "/run/wg-home.priv";
|
privateKeyFile = "/run/wg-home.priv";
|
||||||
|
# TODO: this make this `wants` and `after`, instead of manually starting it
|
||||||
preSetup =
|
preSetup =
|
||||||
let
|
let
|
||||||
gen-key = config.sane.fs."/run/wg-home.priv".unit;
|
gen-key = config.sane.fs."/run/wg-home.priv".unit;
|
||||||
|
Reference in New Issue
Block a user