02/02: overdrive: Add Wireguard interface.

[Mathieu Othacehe]

mothacehe pushed a commit to branch master
in repository maintenance.

commit aca88126a293a8a7f5eb06368519156910e8881e
Author: Mathieu Othacehe <othacehe@gnu.org>
AuthorDate: Wed Feb 17 10:30:18 2021 +0100

    overdrive: Add Wireguard interface.
    
    * hydra/overdrive.scm: Add Wireguard interface.
---
 hydra/overdrive.scm | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/hydra/overdrive.scm b/hydra/overdrive.scm
index 974339e..ca9c105 100644
--- a/hydra/overdrive.scm
+++ b/hydra/overdrive.scm
@@ -3,7 +3,7 @@
 ;; Released under the GNU GPLv3 or any later version.
 
 (use-modules (guix) (gnu))
-(use-service-modules avahi cuirass networking mcron ssh)
+(use-service-modules avahi cuirass networking mcron ssh vpn)
 (use-package-modules screen ssh linux certs)
 
 (define (sysadmin name full-name)
@@ -45,6 +45,13 @@
          (string-append #$btrfs-progs "/bin/btrfs balance "
                         "start -dusage=50 -musage=70 /")))
 
+(define berlin-peer
+  (wireguard-peer
+   (name "peer")
+   (endpoint "ci.guix.gnu.org:51820")
+   (public-key "wOIfhHqQ+JQmskRS2qSvNRgZGh33UxFDi8uuSXOltF0=")
+   (allowed-ips '("10.0.0.1/32"))))
+
 ;; The actual machine.
 
 (operating-system
@@ -99,6 +106,11 @@
                     (workers 2)
                     (server "10.0.0.1:5555") ;berlin
                     (systems '("armhf-linux" "aarch64-linux"))))
+          (service wireguard-service-type
+                   (wireguard-configuration
+                    (addresses '("10.0.0.3/32"))
+                    (peers
+                     (list berlin-peer))))
 
           (service ntp-service-type)