1
Files
flake-nixinator/system/services/wireguard.nix

44 lines
780 B
Nix

{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.wireguard = {
image = "linuxserver/wireguard:latest";
autoStart = true;
login = {
# Uses DockerHub by default
# registry = "";
# DockerHub Credentials
username = "christoph.urlacher@protonmail.com";
passwordFile = "${config.sops.secrets.docker-password.path}";
};
dependsOn = [];
ports = [
"51820:51820"
];
volumes = [
"wireguard_vps_config:/config"
"wireguard_vps_modules:/lib/modules"
];
environment = {
PUID = "1000";
PGID = "1000";
TZ = "Europe/Berlin";
};
extraOptions = [
"--cap-add=NET_ADMIN"
"--cap-add=SYS_MODULE"
# "--net=behind-nginx"
];
};
}