WireGuard: Difference between revisions
do not use IPMasquerade |
systemd.network permissions |
||
| Line 148: | Line 148: | ||
You can use ryamtm/agenix to declaratively store and manage the | You can use ryamtm/agenix to declaratively store and manage the | ||
WireGuard key. | WireGuard key. | ||
For systemd.network: | |||
<syntaxHighlight> | |||
age.secrets.wg-key-vps = { | |||
file = "${inputs.self.outPath}/secrets/wg-key-vps.age"; | |||
# for permission, see man systemd.netdev | |||
mode = "640"; | |||
owner = "systemd-network"; | |||
group = "systemd-network"; | |||
}; | |||
</syntaxHighlight> | |||
= networking.wireguard = | = networking.wireguard = | ||