From dd4e5f1bd57b96d333903466f70f15c116df20a3 Mon Sep 17 00:00:00 2001
From: Caroline Larimore <caroline@larimo.re>
Date: Sat, 22 Nov 2025 02:07:38 -0800
Subject: wireguard: enable wireguard vpn

---
 systems/x86_64-linux/c-pc/network.nix | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

(limited to 'systems/x86_64-linux')

diff --git a/systems/x86_64-linux/c-pc/network.nix b/systems/x86_64-linux/c-pc/network.nix
index aa7e075..db3ff79 100644
--- a/systems/x86_64-linux/c-pc/network.nix
+++ b/systems/x86_64-linux/c-pc/network.nix
@@ -14,9 +14,17 @@
     firewall = {
       enable = false;
 
-      allowedTCPPorts = [ 8096 50000 ];
-      allowedUDPPorts = [ ];
+      allowedTCPPorts = [
+        8096 # jellyfin
+        50000 # qbittorrent
+      ];
+      
+      allowedUDPPorts = [
+        51820 # wireguard
+      ];
     };
+
+    wg-quick.interfaces.wg0.configFile = "/secrets/wireguard.conf";
   };
 
   environment.etc."wpa_supplicant.conf" = {
-- 
cgit v1.2.3