WireGuard: Difference between revisions
imported>2x Add troubleshooting entry for persistentKeepalive+privateKeyFile |
imported>Mohe2015 Use *KeyFile for systemd-networkd to prevent leaking keys into the Nix Store. |
||
| Line 250: | Line 250: | ||
Name = "wg0"; | Name = "wg0"; | ||
}; | }; | ||
# See also man systemd.netdev | # See also man systemd.netdev (also contains info on the permissions of the key files) | ||
extraConfig = '' | extraConfig = '' | ||
[WireGuard] | [WireGuard] | ||
# | # Don't use a file from the Nix store as these are world readable. | ||
PrivateKeyFile=/run/keys/wireguard-privkey | |||
ListenPort=9918 | ListenPort=9918 | ||