mikl/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(mesh): add selected Telegram and OpenRouter egress policy

Browse source
This commit is contained in:
mikl 2026-08-03 08:41:57 +03:00
commit 56bb3d7f7c
2 changed files with 80 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
hosts/heather/default.nix
View file

@ -22,6 +22,7 @@
./tuwunel-admin.nix # matrix admin web UI (systemd, статический бинарник)
./pi-web.nix # pi-web (web UI для pi coding agent, systemd + npm global)
./mesh-clients.nix # Sol-style client pool (wg-clients1)
./mesh-egress.nix # Sol-style selected-destination egress policy
];
# First server-to-server WireGuard backbone link: heather ↔ hyacinth.
@ -57,7 +58,9 @@
peers = [
{
publicKey = "BxTH8+MiA8Hv48UfpWJDVXIhbO5HgO2KTBEXIqqr23k=";
allowedIPs = [ "10.99.0.2/32" "10.0.0.2/32" ];
# Match all destinations for future policy routes; allowedIPsAsRoutes=false
# keeps this from installing a default route automatically.
allowedIPs = [ "0.0.0.0/0" ];
endpoint = "195.242.119.59:51820";
persistentKeepalive = 25;
}