From b47334d7d7d458dd394001ec69b43578854cb66e Mon Sep 17 00:00:00 2001
From: Alex Auvolat <alex@adnab.me>
Date: Wed, 14 Dec 2022 18:02:30 +0100
Subject: Replace deploy_wg by a NixOS activation script

---
 nix/deuxfleurs.nix | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'nix')

diff --git a/nix/deuxfleurs.nix b/nix/deuxfleurs.nix
index 7c7c6d3..14085c1 100644
--- a/nix/deuxfleurs.nix
+++ b/nix/deuxfleurs.nix
@@ -248,6 +248,15 @@ in
       }) cfg.cluster_nodes;
     };
 
+    system.activationScripts.generate_df_wg_key = ''
+      if [ ! -f /var/lib/deuxfleurs/wireguard-keys/private ]; then
+        mkdir -p /var/lib/deuxfleurs/wireguard-keys
+        (umask 077; ${pkgs.wireguard-tools}/bin/wg genkey > /var/lib/deuxfleurs/wireguard-keys/private)
+        echo "New Wireguard key was generated."
+        echo "This node's Wireguard public key is: $(${pkgs.wireguard-tools}/bin/wg pubkey < /var/lib/deuxfleurs/wireguard-keys/private)"
+      fi
+    '';
+
     # Configure /etc/hosts to link all hostnames to their Wireguard IP
     networking.extraHosts = builtins.concatStringsSep "\n" (map
       ({ hostname, IP, ...}: "${IP} ${hostname}")
-- 
cgit v1.2.3