branch master updated: hydra: berlin: Add Wireguard service.

[Mathieu Othacehe]

This is an automated email from the git hooks/post-receive script.

mothacehe pushed a commit to branch master
in repository maintenance.

The following commit(s) were added to refs/heads/master by this push:
     new 67d6fea  hydra: berlin: Add Wireguard service.
67d6fea is described below

commit 67d6fea22d034074b892e4bb4c2560ea70abf946
Author: Mathieu Othacehe <othacehe@gnu.org>
AuthorDate: Mon Apr 5 14:27:20 2021 +0200

    hydra: berlin: Add Wireguard service.
    
    * hydra/berlin.scm: Add Wireguard service.
---
 hydra/berlin.scm | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/hydra/berlin.scm b/hydra/berlin.scm
index 74b38e5..8feb137 100644
--- a/hydra/berlin.scm
+++ b/hydra/berlin.scm
@@ -9,7 +9,7 @@
              (srfi srfi-1)
              (ice-9 match))
 (use-service-modules avahi base databases dns monitoring networking admin
-                     shepherd ssh)
+                     shepherd ssh vpn)
 (use-package-modules admin base certs databases emacs linux mail monitoring
                      ssh tls tor vim package-management
                      version-control
@@ -398,6 +398,17 @@ Happy hacking!\n"))
              (service disk-space-watchdog-service-type
                       (list (* 500 GiB) (* 50 GiB)))
 
+             ;; VPN connection to the remote build nodes.
+             (service wireguard-service-type
+                      (wireguard-configuration
+                       (addresses (list "10.0.0.1/32"))
+                       (peers
+                        (list
+                         (wireguard-peer
+                          (name "overdrive1")
+                          (public-key 
"m2qys8ATAKUTT8YNUM3OmnJnw1lYm5GHpUA42/l1Qz8=")
+                          (allowed-ips '("10.0.0.3/32")))))))
+
              (frontend-services %sysadmins
                                 ;; Make sure we get enough build users.
                                 #:authorized-keys %build-node-keys