modules/{wireguard{,-tf},bird,policyrouting}: Init from hexchen

config/hosts/athame/nixos.nix

@@ -7,6 +7,7 @@ with lib;
 
   imports = with meta; [
     profiles.hardware.hcloud-imperative
+    profiles.network
     users.kat.server
     users.kat.services.weechat
     services.filehost

config/hosts/beltane/nixos.nix

@@ -112,6 +112,10 @@ with lib;
         };
       };
     };
+    wireguard = {
+      enable = true;
+      tf.enable = true;
+    };
     yggdrasil = {
       enable = true;
       pubkey = "d3e488574367056d3ae809b678f799c29ebfd5c7151bb1f4051775b3953e5f52";

config/hosts/daiyousei/nixos.nix

@@ -2,6 +2,7 @@
   imports = with meta; [
     profiles.hardware.aarch64
     profiles.hardware.oracle.ubuntu
+    profiles.network
     services.nginx
     services.keycloak
     services.glauth
@@ -21,6 +22,13 @@
     };
   };
 
+  network = {
+    yggdrasil = {
+      enable = true;
+      pubkey = "89771aa2f15fce6bbc3548f95be360cf59657d299837b10adf53944b54e8f121";
+    };
+  };
+
   services.nginx.virtualHosts =
     let
       splashy = pkgs.host-splash-site config.networking.hostName;

config/hosts/ostara/nixos.nix

@@ -7,6 +7,7 @@ with lib;
 
   imports = with meta; [
     profiles.hardware.eeepc-1015pem
+    profiles.network
     services.kattv
   ];
 

config/hosts/rinnosuke/nixos.nix

@@ -1,6 +1,7 @@
 { config, tf, meta, kw, pkgs, lib, sources, ... }: with lib; {
   imports = with meta; [
     profiles.hardware.oracle.ubuntu
+    profiles.network
     services.knot
     services.nginx
   ];
@@ -19,6 +20,13 @@
     };
   };
 
+  network = {
+    yggdrasil = {
+      enable = true;
+      pubkey = "d3db7b089f3cb2d33e18c77b8f9a5a08185798143822b219dbc938aa37d29310";
+    };
+  };
+
   services.nginx.virtualHosts =
     let
       splashy = pkgs.host-splash-site config.networking.hostName;

config/hosts/samhain/nixos.nix

@@ -14,6 +14,7 @@ in
     profiles.hardware.ms-7b86
     profiles.gui
     profiles.vfio
+    profiles.network
     profiles.cross.aarch64
     profiles.cross.armv6l
     profiles.cross.armv7l

config/hosts/shinmyoumaru/nixos.nix

@@ -5,7 +5,7 @@
 
   imports = with meta; [
     profiles.hardware.raspi
-    profiles.base
+    profiles.network
     services.dnscrypt-proxy
     services.dht22-exporter
     ./image.nix

config/hosts/yule/nixos.nix

@@ -8,6 +8,7 @@ with lib;
   imports = with meta; [
     profiles.hardware.v330-14arr
     profiles.gui
+    profiles.network
     users.kat.guiFull
     services.nginx
     services.restic