diff --git a/machines/NixOS-VPS/hardware/networks.nix b/machines/NixOS-VPS/hardware/networks.nix index 6490b83..17de91e 100644 --- a/machines/NixOS-VPS/hardware/networks.nix +++ b/machines/NixOS-VPS/hardware/networks.nix @@ -86,5 +86,9 @@ rec { IPv4 = "${wireguardIPv4Prefix}.12"; IPv6 = "${wireguardIPv6Prefix}:c"; }; + hypervisor-dns = { + IPv4 = "${wireguardIPv4Prefix}.13"; + IPv6 = "${wireguardIPv6Prefix}:d"; + }; }; } diff --git a/machines/NixOS-VPS/services/wireguard.nix b/machines/NixOS-VPS/services/wireguard.nix index 3a5898f..01f9dba 100644 --- a/machines/NixOS-VPS/services/wireguard.nix +++ b/machines/NixOS-VPS/services/wireguard.nix @@ -115,6 +115,13 @@ in { AllowedIPs = [ "${IPv4}/32" "${IPv6}/128" ]; }; } + { + wireguardPeerConfig = with wireguardPeers.hypervisor-dns; { + PublicKey = "x4uavQEEfhdqNC4FCOPfKlEDRJiwOz4dy2W1KhJtnwc="; + PresharedKeyFile = "/var/lib/wireguard/hypervisor-dns/preshared"; + AllowedIPs = [ "${IPv4}/32" "${IPv6}/128" ]; + }; + } ]; }; };