Commit graph

10 commits

Author SHA1 Message Date
Azat Bahawi
0589bd307d
nixos/{wg-quick,wireguard}: add AmneziaWG support (#341663) 2025-02-09 10:03:27 +03:00
AveryanAlex
3896639b27
nixos/wireguard-networkd: add assertion for type == "wireguard" 2025-02-08 14:28:31 +03:00
networkException
c1eb3b68f8
nixos/wireguard-networkd: escape backslashes in systemd credential names
This patch fixes loading issues for pre shared keys for
peers without custom names. In this case the peer's public
key would be used in the name for the corresponding pre
shared key credential, causing a loading error.

The networking.wireguard base module already escapes some
base64 characters of the public key with escape sequences
starting with a backslash. This backslash is now replaced
with an underscore for use in the credential names.
2024-12-28 01:34:11 +01:00
networkException
e7e42de5a7
nixos/wireguard-networkd: only set PresharedKey credential when given a file
This patch fixes an oversight in the initial implementation
of using systemd credentials in 6bc8dcc630
that would cause a warning to be logged about a missing credential
when presharedKeyFile wasn't set.
2024-12-27 23:14:32 +01:00
networkException
1fc937818d
nixos/wireguard-networkd: fix systemd credentials not working with multiple keys per interface
This patch fixes systemd credential loading for wireguard
with networkd not working when specifying more than one
credential per interface by properly flattening the resulting
multidimensional list instead of falling back on string concat
with a space.

Resolves #365402
2024-12-15 19:22:33 +01:00
Majiir Paktu
e5a456f26f nixos/wireguard-networkd: re-enable by default for networkd users 2024-12-10 19:33:45 -05:00
Majiir Paktu
6bc8dcc630 nixos/wireguard-networkd: use systemd credentials for privateKeyFile and presharedKeyFile 2024-12-10 19:33:45 -05:00
Majiir Paktu
cca305f3e3 nixos/wireguard-networkd: fix issue link 2024-12-10 16:57:53 -05:00
Majiir Paktu
a93d42e97e nixos/wireguard-networkd: disable by default
Enabling networking.wireguard.useNetworkd currently requires users to
modify the permissions of their private key files. Since that is a bad
upgrade experience, the module should be disabled by default for now.
Once systemd credential support is added to the module, it should be
safe to once again enable it by default for networkd users.
2024-12-10 16:54:50 -05:00
Majiir Paktu
a5de36518f nixos/wireguard-networkd: init
Adds a networkd backend for the networking.wireguard options.
2024-12-07 20:01:17 -05:00