24 lines
706 B
Nix
24 lines
706 B
Nix
{ config, pkgs, ... }:
|
|
|
|
with lib;
|
|
let
|
|
hosts = import ./hosts;
|
|
|
|
cfg = config.services.my-tinc;
|
|
|
|
mapAttrs = f: attrs: builtins.listToAttrs (
|
|
map (name: { inherit name; value = f name (builtins.getAttr name attrs); }) (builtins.attrNames attrs)
|
|
);
|
|
in
|
|
{
|
|
config = mkIf cfg.enable {
|
|
# All hosts we know of
|
|
services.tinc.networks.my-tinc.hostSettings = mapAttrs (name: host: {
|
|
addresses = [ { inherit (host) address; } ];
|
|
subnets = [ { address = host.subnetAddr; } ];
|
|
rsaPublicKey = mkIf (host ? "rsaPublicKey") (builtins.readFile host.rsaPublicKey);
|
|
ed25519PublicKey = mkIf (host ? "ed25519PublicKey") (builtins.readFile host.ed25519PublicKey);
|
|
}) hosts;
|
|
};
|
|
}
|