joepie91/morph-rc
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Very explicitly DO NOT let the tinc service auto-generate keys

Browse source
This commit is contained in:
Sven Slootweg 2020-06-01 01:50:04 +02:00
parent bf6424fc84
commit 16c4f3c4bf
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
configuration/lib/tinc-configuration.nix
View file

@ -23,6 +23,7 @@
services.tinc.networks.cryto = {
debugLevel = 3;
chroot = false;
ed25519PrivateKeyFile = "/etc/tinc/cryto/ed25519_key.priv";
extraConfig = generateConfiguration {
AutoConnect = "yes";
@ -80,4 +81,12 @@
options = [ "NOPASSWD" ];
}];
}];
# Override this to get rid of the automatic key generation
systemd.services."tinc.cryto".preStart = lib.mkForce ''
mkdir -p /etc/tinc/cryto/hosts
chown tinc.cryto /etc/tinc/cryto/hosts
mkdir -p /etc/tinc/cryto/invitations
chown tinc.cryto /etc/tinc/cryto/invitations
'';
}