Cloonar/nixos
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

feat: change openclaw to a vm and give read access to a db

Browse source
This commit is contained in:
Dominik Polakovics Polakovics 2026-02-09 03:06:46 +01:00
parent 5847c04acd
commit f3ef4ff11c
10 changed files with 372 additions and 75 deletions
Download patch file Download diff file Expand all files Collapse all files

14
hosts/web-arm/modules/wireguard.nix Normal file
View file

@ -0,0 +1,14 @@
{ config, ... }: {
sops.secrets.wg_cloonar_key = {};
networking.wireguard.interfaces.wg_cloonar = {
ips = [ "10.42.98.10/24" ];
privateKeyFile = config.sops.secrets.wg_cloonar_key.path;
peers = [{
endpoint = "vpn.cloonar.com:51820";
publicKey = "TKQVDmBnf9av46kQxLQSBDhAeaK8r1zh8zpU64zuc1Q=";
allowedIPs = [ "10.42.0.0/16" ];
persistentKeepalive = 25; # web-arm is behind NAT, keep tunnel alive
}];
};
}