site update and some vpn shit

2026-01-06 02:28:43 +01:00 · 2026-01-06 02:28:43 +01:00 · 8ebf4b74e6
commit 8ebf4b74e6
parent b0158e96c8
7 changed files with 73 additions and 74 deletions
--- a/fili/services/media/vpn.nix
+++ b/fili/services/media/vpn.nix
@ -0,0 +1,16 @@
+{ config, secrets, ... }:
+{
+  sops.secrets.mullvad = {
+    sopsFile = "${secrets}/mullvad.yaml";
+    owner = "root";
+    format = "yaml";
+  };
+
+  vpnNamespaces.mullvad = {
+    enable = true;
+    wireguardConfigFile = config.sops.secrets.mullvad.path;
+    accessibleFrom = [
+      "192.168.0.0/16"
+    ];
+  };
+}