diff --git a/modules/services/agenix.nix b/modules/services/agenix.nix index 93bdb5b..7a8958d 100644 --- a/modules/services/agenix.nix +++ b/modules/services/agenix.nix @@ -18,5 +18,9 @@ file = ../../secrets/spotifyd.age; owner = "1000"; }; + homeVPN = { + file = ../../secrets/home-vpn.age; + owner = "1000"; + }; }; } diff --git a/modules/services/default.nix b/modules/services/default.nix index 5a30921..6da254f 100644 --- a/modules/services/default.nix +++ b/modules/services/default.nix @@ -9,6 +9,7 @@ ./jupyter.nix ./kdeconnect.nix ./keyring.nix + ./openvpn.nix ./picom.nix ]; diff --git a/modules/services/openvpn.nix b/modules/services/openvpn.nix new file mode 100644 index 0000000..50745df --- /dev/null +++ b/modules/services/openvpn.nix @@ -0,0 +1,11 @@ +{ config, lib, pkgs, ... }: + +{ + services.openvpn.servers = { + homeVPN = { + config = "config /run/agenix/homeVPN "; + autoStart = false; + updateResolvConf = true; + }; + }; +} diff --git a/secrets/home-vpn.age b/secrets/home-vpn.age new file mode 100644 index 0000000..25b3839 Binary files /dev/null and b/secrets/home-vpn.age differ diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 3251a54..2b9e941 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -16,4 +16,5 @@ in { "spotifyd.age".publicKeys = users ++ hosts; "email-desktop.age".publicKeys = users ++ hosts; "email-laptop.age".publicKeys = users ++ hosts; + "home-vpn.age".publicKeys = users ++ hosts; }