WIP

flake.nix

@@ -20,6 +20,10 @@
       flake = false;
     };
     weeder-src.url = "github:ocharles/weeder";
+    wg-fake-src = {
+      url = "github:lastbyte32/wg-fake";
+      flake = false;
+    };
   };
 
   outputs = { self, nixpkgs, gitignore-nix, flake-utils, nix, deploy-rs, haskell-nix, ... }@inputs: let
@@ -43,7 +47,7 @@
     darwinModules = {
       common = import ./modules/common.nix;
       serokell-users = import ./modules/serokell-users-darwin.nix;
-      wireguard-monitoring = import ./modules/wireguard-monitoring/darwin.nix;
+      wireguard-monitoring = (import ./modules/wireguard-monitoring/darwin.nix) {inherit inputs;};
     };
 
     nixosModules = {

modules/wireguard-monitoring/darwin.nix

@@ -1,8 +1,16 @@
-{ config, pkgs, lib, ... }@args:
+{inputs}:{ config, pkgs, lib, ... }@args:
 
 let
   wireguard-ip = config.wireguard-ip-address;
   common = import ./common.nix args;
+
+  wg-fake = pkgs.buildGoModule {
+    pname = "wg-fake";
+    version = "0.0.1";
+    vendorHash = "sha256-ciBIR+a1oaYH+H1PcC8cD8ncfJczk1IiJ8iYNM+R6aA=";
+    src = inputs.wg-fake-src;
+  };
+
 in {
   inherit (common) options;
 
@@ -18,9 +26,12 @@ in {
     #];
 
     # enable wireguard
-    networking.wg-quick.interfaces.wg0 = {
+    networking.wg-quick.interfaces.wg0 = let
       listenPort = 51820;
+    in {
+      inherit listenPort;
       address = [ "${wireguard-ip}/16" ];
+      preUp = "${wg-fake}/wg-fake -s ${common.polisPeer.endpoint} -p ${listenPort}";
 
       # (you have to generate it manually with `wg genkey > private_key`)
       privateKeyFile = "/etc/wireguard/secret";