rust pobeda

2025-06-08 23:40:41 +00:00 · 2025-06-08 23:40:41 +00:00 · 5cd0ded292
commit 5cd0ded292
parent 1bc03bdb14
59 changed files with 1185 additions and 1389 deletions
--- a/modules/vpn/hft.nix
+++ b/modules/vpn/hft.nix
@ -0,0 +1,19 @@
+{ config, lib, pkgs, ... }:
+let
+  secrets = config.sops.secrets;
+in
+{
+  sops.secrets."work/ovpn".sopsFile = ../../secrets/work.yaml;
+  sops.secrets."work/password".sopsFile = ../../secrets/work.yaml;
+
+  services.openvpn.servers.hft = {
+    autoStart = false;
+    updateResolvConf = true;
+
+    config = ''
+      config ${secrets."work/ovpn".path}
+      askpass ${secrets."work/password".path}
+    '';
+  };
+  systemd.services.openvpn-hft.requires = ["yor-proxy.service"];
+}