nixos-conf/machine-confs/idacloud.nix

{ ... }:
{
  custom.nextcloud_domain = "idacloud.sinerva.eu";

  imports = [
    ../base.nix
    ../services/nextcloud.nix
  ];

  # Networking conf including WireGuard
  networking = {
    hostName = "idacloud";

    firewall.allowedUDPPorts = [ 51822 ];

    wg-quick.interfaces = {
      wg0 = {
        address = [ "10.1.0.1/24" ];
        privateKeyFile = "/root/wireguard-keys/privatekey";
        listenPort = 51822;

        peers = [
          # Laptop
          #          {
          #            publicKey = "TODO";
          #            presharedKeyFile = "/root/wireguard-keys/psk1";
          #            allowedIPs = [ "10.1.0.2/32" ];
          #          }
          # Phone
          #          {
          #            publicKey = "TODO";
          #            presharedKeyFile = "/root/wireguard-keys/psk2";
          #            allowedIPs = [ "10.1.0.3/32" ];
          #          }
          # Test Phone
          {
            publicKey = "66ubJoZWX9jyPKMO2ORomokPO3CokBTGjHiOhHZLjzI=";
            presharedKeyFile = "/root/wireguard-keys/psk3";
            allowedIPs = [ "10.1.0.4/32" ];
          }
        ];
      };
    };
  };

  # HARDWARE SPECIFIC
  services.qemuGuest.enable = true;
}