tigor/NixOS
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

openvpn: update settings

Browse source
This commit is contained in:
Tigor Hutasuhut 2024-06-21 22:01:11 +07:00
parent 9bd73d059e
commit a2e3d507f9
1 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
system/services/openvpn.nix
View file

@ -81,7 +81,7 @@ in
secretPlaceholder = config.sops.placeholder."openvpn/clients/phone"; secretPlaceholder = config.sops.placeholder."openvpn/clients/phone";
ifConfig = "10.8.1.1 10.8.1.2"; ifConfig = "10.8.1.1 10.8.1.2";
}; };
path = "/etc/openvpn/phone.ovpn"; path = "/nas/Syncthing/Sync/VPN/phone.ovpn";
owner = config.profile.user.name; owner = config.profile.user.name;
}; };
"openvpn/key/laptop" = { "openvpn/key/laptop" = {
@ -89,7 +89,7 @@ in
secretPlaceholder = config.sops.placeholder."openvpn/clients/laptop"; secretPlaceholder = config.sops.placeholder."openvpn/clients/laptop";
ifConfig = "10.8.2.1 10.8.2.2"; ifConfig = "10.8.2.1 10.8.2.2";
}; };
path = "/etc/openvpn/laptop.ovpn"; path = "/nas/Syncthing/Sync/VPN/laptop.ovpn";
owner = config.profile.user.name; owner = config.profile.user.name;
}; };
}; };
@ -98,6 +98,9 @@ in
config = '' config = ''
dev ${vpn-dev} dev ${vpn-dev}
proto udp proto udp
status /tmp/openvpn-status.log
comp-lzo no
tls-server tls-server
cipher AES-256-CBC cipher AES-256-CBC
@ -105,7 +108,6 @@ in
server 10.10.10.0 255.255.255.0 server 10.10.10.0 255.255.255.0
allow-compression no
ca ${config.sops.secrets."openvpn/server/ca".path} ca ${config.sops.secrets."openvpn/server/ca".path}
cert ${config.sops.secrets."openvpn/server/cert".path} cert ${config.sops.secrets."openvpn/server/cert".path}
key ${config.sops.secrets."openvpn/server/key".path} key ${config.sops.secrets."openvpn/server/key".path}
@ -116,6 +118,10 @@ in
ping-timer-rem ping-timer-rem
persist-tun persist-tun
persist-key persist-key
push "block-outside-dns"
push "dhcp-option 192.168.100.3"
push "comp-lzo no"
''; '';
autoStart = true; autoStart = true;
}; };