colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

wg-home: enable dynamicEndpointRefreshSeconds to be robust against intermittent failure

Browse Source
This commit is contained in:
colin 2023-01-20 10:34:30 +00:00
parent f4d6ecb1cf
commit a653311f04
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
hosts/modules/wg-home.nix
View File

@ -8,11 +8,14 @@ let
mkPeer = { ips, pubkey, endpoint }: {
publicKey = pubkey;
allowedIPs = map (k: "${k}/32") ips;
endpoint = mkIf (endpoint != null) endpoint;
} // (optionalAttrs (endpoint != null) {
inherit endpoint;
# send keepalives every 25 seconds to keep NAT routes live.
# only need to do this from client -> server though, i think.
persistentKeepalive = mkIf (endpoint != null) 25;
};
persistentKeepalive = 25;
# allows wireguard to notice DNS/hostname changes, with this much effective TTL.
dynamicEndpointRefreshSeconds = 600;
});
# make separate peers to route each given host
mkClientPeers = hosts: map (p: mkPeer {
inherit (p) pubkey endpoint;