bastion wireguard: don't use hostnames
Eelco Dolstra committed
Jun 5, 2019 at 21:22 UTC
82fc0a5e238b65662c1adee3e1e5e2e0dfa5d8f7
1 file changed
+5
-1
modules/wireguard.nix
+5
-1
@@ -4,7 +4,11 @@ let
4
hosts = {
5
bastion = {
6
ip = "10.254.1.1";
7
- endpoint = "bastion.nixos.org";
7
+
8
+ # wg won't retry resolution if it fails... so
9
+ # hard-code the IP to bastion.nixos.org so we don't lock
10
+ # ourselves out.
11
+ endpoint = "34.254.208.229";
12
port = 51820;
13
publicKey = "nG7I9gegJIynKOZ6tzpvmLdCZ/xScTgRZeFvYLFyil4=";
14
};