the-computer-club / lynx

shared nixos modules
BSD 3-Clause "New" or "Revised" License
8 stars 1 forks source link

Mesh-ID PSK #10

Open Skarlett opened 7 months ago

Skarlett commented 7 months ago

Issue tracking the support of Preshared keys per connection for each host in the network. The feature specifies the use of unique keys for each member available, where each connection in the graph is a shared key Related to:

psk-mesh-id

This feature provides a helper script wg-flake-psk. Its intended usage is to generate, and exchange keys inside of flake-guard on your behalf.

Its underlying logic is to read a flake output as json, modify the given structure with the exchanged keys for each host. It will then provide the secrets to place in each host. This tool is used before nixos-rebuild.

This is internally implemented as

nix eval your-flake#wireguard.networks | wg-flake-psk

No more information available at this time.