Add wireguard configuration

.gitignore

@@ -1,3 +1,5 @@
 nixos/result
 pw
 .stfolder
+privkey
+privpsk

packages/wireguard/package.nix

@@ -0,0 +1,30 @@
+{ pkgs, ... }:
+
+{
+    networking.wg-quick.interfaces = {
+        wg0 = {
+            address = [ "10.174.110.32/32" ];
+            dns = [ "10.128.0.1" ];
+            mtu = 1320;
+            privateKeyFile = "/nix/config/packages/wireguard/privkey";
+
+            # Route local traffic through local network
+            preUp = ''
+                ${pkgs.unixtools.route}/bin/route add -net 192.168.2.0 netmask 255.255.255.0 metric 0 dev eno1
+            '';
+            postDown = ''
+                ${pkgs.unixtools.route}/bin/route del -net 192.168.2.0 netmask 255.255.255.0 metric 0 dev eno1
+            '';
+
+            peers = [{
+                publicKey = "PyLCXAQT8KkM4T+dUsOQfn+Ub3pGxfGlxkIApuig+hk=";
+                presharedKeyFile = "/nix/config/packages/wireguard/privpsk";
+                allowedIPs = [ "0.0.0.0/0" ];
+                endpoint = "nl.vpn.airdns.org:1637";
+                persistentKeepalive = 15;
+            }];
+        };
+    };
+
+    networking.firewall.allowedUDPPorts = [ 1637 ];
+}

systems/homeserver.nix

@@ -9,6 +9,7 @@
         ../packages/vim/package.nix
         ../packages/nginx/homeserver.nix
         ../packages/syncthing/homeserver.nix
+        ../packages/wireguard/package.nix
     ];
 
     boot = {