Fix Many PIA/Wireguard

It logs out every restart

Token needs to regen

The linuxserver/wiregard contianer stopped working

So, we switch to a dedicated container for this, and also changed username and passwd becase.., well those also stopped working
This commit is contained in:
2023-12-06 13:28:49 -05:00
parent 5092943641
commit 4713c05ca4
2 changed files with 13 additions and 19 deletions

View File

@@ -1,8 +1,4 @@
{ config, pkgs, ...}:
let
in
{
{ config, pkgs, ...}: {
imports = [
../modules/pods.nix
];
@@ -15,16 +11,17 @@ in
dataDir = "/jelly/data";
configDir = "/jelly/conf";
in {
sops.secrets.jellyfin-pia = {};
virtualisation.oci-containers = let
cnt = config.virtualisation.oci-containers.containers;
getPorts = l: builtins.concatMap (c: cnt."${c}".ports) l;
in {
containers = {
wireguard = {
image = "linuxserver/wireguard:latest";
image = "thrnz/docker-wireguard-pia";
volumes = [
"${configDir}/wireguard:/config"
"${configDir}/wireguard_pia:/opt"
# "${configDir}/wireguard:/config"
"${configDir}/wireguard_pia:/pia"
];
ports = getPorts [
"deluge"
@@ -37,22 +34,18 @@ in
];
environment = {
TZ = "America/Toronto";
PIA_USER = "p5062257";
PIA_PASS = "HEqwg9CvQB";
AUTOCONNECT = "true";
PIA_PF = "false";
DISABLE_IPV6 = "yes";
PIA_DNS = "true";
VPN_PROTOCOL = "wireguard";
LOC = "ca";
};
extraOptions = [
"--cap-add=ALL"
"--pull=newer"
"--dns=1.1.1.1"
"--env-file=${config.sops.secrets.jellyfin-pia.path}"
"--sysctl=net.ipv4.conf.all.src_valid_mark=1"
"--sysctl=net.ipv6.conf.lo.disable_ipv6=1"
"--sysctl=net.ipv6.conf.all.disable_ipv6=1"
"--sysctl=net.ipv6.conf.default.disable_ipv6=1" ];
"--sysctl=net.ipv6.conf.default.disable_ipv6=1"
];
};
deluge = {