Nix Podman Stacks

nps.stacks.wg-easy.enable

Whether to enable wg-easy.

Type: boolean

Default: false

Example: true

Declared by:

• <nix-podman-stacks/modules/wg-easy>

nps.stacks.wg-easy.containers.wg-easy

Alias of services.podman.containers.wg-easy.

Type: submodule

Declared by:

• <nix-podman-stacks/modules/wg-easy>

nps.stacks.wg-easy.extraEnv

Extra environment variables to set for the container. Variables can be either set directly or sourced from a file (e.g. for secrets).

See https://wg-easy.github.io/wg-easy/latest/advanced/config/unattended-setup/

Type: attribute set of (null or boolean or signed integer or string or absolute path or (submodule))

Default: { }

Example:

{
  INIT_DNS = "1.1.1.1";
  INIT_PASSWORD = {
    fromFile = "/run/secrets/wg_easy_admin_password";
  };
}

Declared by:

• <nix-podman-stacks/modules/wg-easy>

nps.stacks.wg-easy.host

The external domain or IP address of the Wireguard server. Will be used as the ‘endpoint’ when generating client configurations.

Only has an effect during initial setup. See https://wg-easy.github.io/wg-easy/v15.1/advanced/config/unattended-setup/

Type: string

Default: "vpn.${config.nps.stacks.traefik.domain}"

Declared by:

• <nix-podman-stacks/modules/wg-easy>

nps.stacks.wg-easy.port

The port on which the Wireguard server will listen. Will be passed as INIT_PORT during initial setup. Only has an effect during initial setup. See https://wg-easy.github.io/wg-easy/v15.1/advanced/config/unattended-setup/

Type: 16 bit unsigned integer; between 0 and 65535 (both inclusive)

Default: 51820

Declared by:

• <nix-podman-stacks/modules/wg-easy>