From 62f4b74fe06b781408106872a1bc6b8bf81d6864 Mon Sep 17 00:00:00 2001
From: Julian Sutter <jsutter@symbiotip.com>
Date: Fri, 28 Jul 2023 09:37:56 -0700
Subject: [PATCH] openvpn

---
 flake.lock                                    |  12 +-
 users/jsutter.nix                             |  14 +-
 ...gmt-dr1-fw01-UDP4-1194-jsutter-config.ovpn | 239 ++++++++++++++++++
 ...gmt-sfo-fw01-UDP4-1194-jsutter-config.ovpn | 124 +++++++++
 4 files changed, 378 insertions(+), 11 deletions(-)
 create mode 100644 users/openvpn/mgmt-dr1-fw01-UDP4-1194-jsutter-config.ovpn
 create mode 100644 users/openvpn/mgmt-sfo-fw01-UDP4-1194-jsutter-config.ovpn

diff --git a/flake.lock b/flake.lock
index 52646c6..f363931 100755
--- a/flake.lock
+++ b/flake.lock
@@ -7,11 +7,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1689495092,
-        "narHash": "sha256-yZu2j5FpLZEPhJQQutMCPTxa1VMigLPabLYvLTq6ASM=",
+        "lastModified": 1690303752,
+        "narHash": "sha256-2YiwFHQERGoaORNORmsdmVlPD8CVVwlwbV2+f77sFhg=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "2f84579a70b8c74e5ebb37299a0c3ba279f09382",
+        "rev": "ba2c0737cc848db03470828fdb5e86df75ed42a8",
         "type": "github"
       },
       "original": {
@@ -22,11 +22,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1689534811,
-        "narHash": "sha256-jnSUdzD/414d94plCyNlvTJJtiTogTep6t7ZgIKIHiE=",
+        "lastModified": 1690179384,
+        "narHash": "sha256-+arbgqFTAtoeKtepW9wCnA0njCOyoiDFyl0Q0SBSOtE=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "6cee3b5893090b0f5f0a06b4cf42ca4e60e5d222",
+        "rev": "b12803b6d90e2e583429bb79b859ca53c348b39a",
         "type": "github"
       },
       "original": {
diff --git a/users/jsutter.nix b/users/jsutter.nix
index c84e583..bbd33eb 100755
--- a/users/jsutter.nix
+++ b/users/jsutter.nix
@@ -46,6 +46,7 @@ in
       signal-desktop
       bottles
       calibre
+      gimp
     ];
   };
 
@@ -69,16 +70,19 @@ in
     dataDir = "/mnt/data";
     overrideDevices = false;     # overrides any devices added or deleted through the WebUI
     overrideFolders = false;     # overrides any folders added or deleted through the WebUI
-    extraOptions.gui = {
+    settings = {
       user = "admin";
       password = "Monaco55";
-      devices = {
-       "syncthing.symbiotrip.com" = { id = "JRZSWG3-UFR574Q-PBPC6QY-6TGJMO2-G4E2ISW-GCXIBZF-L7AXYV4-KND76QV"; };
-       "cypress.symbiotrip.com" = { id = "MLRISRM-U7BNS6C-R7HZ3LY-Q64HZSJ-3KOPZZI-UQ6XGVD-MTYEQ65-OOAQHQL"; };
-      };
     };
   };
 
+#  programs.openvpn3.enable = true;
+
+#  services.openvpn.servers = {
+#    mgmt-sfo  = { config = '' config /home/jsutter/src/nixos/users/openvpn/mgmt-sfo-fw01-UDP4-1194-jsutter-config.ovpn ''; };
+#    mgmt-dr1  = { config = '' config /home/jsutter/src/nixos/users/openvpn/mgmt-dr1-fw01-UDP4-1194-jsutter-config.ovpn ''; };
+#  };
+
   #Everything below is home manager managed:
   home-manager = {
   	useUserPackages = true;
diff --git a/users/openvpn/mgmt-dr1-fw01-UDP4-1194-jsutter-config.ovpn b/users/openvpn/mgmt-dr1-fw01-UDP4-1194-jsutter-config.ovpn
new file mode 100644
index 0000000..17bbb1b
--- /dev/null
+++ b/users/openvpn/mgmt-dr1-fw01-UDP4-1194-jsutter-config.ovpn
@@ -0,0 +1,239 @@
+dev tun
+persist-tun
+persist-key
+data-ciphers AES-256-GCM:AES-128-GCM:AES-128-CBC
+data-ciphers-fallback AES-128-GCM
+auth SHA256
+tls-client
+client
+resolv-retry infinite
+remote 23.136.160.253 1194 udp4
+lport 0
+verify-x509-name "vpn.server" name
+auth-user-pass
+remote-cert-tls server
+explicit-exit-notify
+
+<ca>
+-----BEGIN CERTIFICATE-----
+MIISRDCCCiygAwIBAgIIMojTQKyvDdswDQYJKoZIhvcNAQENBQAwcDEaMBgGA1UE
+AxMRc2ZvLWZ3MDEtbG9jYWwtY2ExCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxp
+Zm9ybmlhMQwwCgYDVQQHEwNzZm8xDzANBgNVBAoTBnN5bWJpbzERMA8GA1UECxMI
+c2ZvLW1nbXQwHhcNMjIwMjA2MTU1MjA4WhcNMzIwMjA0MTU1MjA4WjBwMRowGAYD
+VQQDExFzZm8tZncwMS1sb2NhbC1jYTELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNh
+bGlmb3JuaWExDDAKBgNVBAcTA3NmbzEPMA0GA1UEChMGc3ltYmlvMREwDwYDVQQL
+EwhzZm8tbWdtdDCCCCIwDQYJKoZIhvcNAQEBBQADgggPADCCCAoCgggBAL4w+4cv
+6EBeT/FoZV43I9g/0Q12k2fSv3FnRzjrEMIG+UCYpEZqlHyj5Y6Gv+En4cgTwl/4
+Eh435vi3B9NSo3scc2efOGu9PJslf2e50kc5Qp1KcBYJfmXib2zK/zKxKMQN4Qcd
+WEjwwLvNjVmd5zeapRdpQesRZMmraDrW30G6pppndSlycWn1zorYumSxASIiCxr2
+/7wPyNpVDJ9qc3dIQqSGBVu3MBA4zq74qDvmq4OSQhrzLHsQul/x9lvh6qeVbt5s
+hQ6JmbdXGWhEY9GXEli/mzYlykJ9pDWLClTfjDWFruqBKRia5T7ymXq+InIwmS+J
+7fBW/mYIApzkSwfA2aIv9316LBFT7WcbZI0nMtlF0fhmwzsFc5STkh7mWtxH2XKF
+XyOC7m3LnAffStHOP+oWSNSf96jrfUP9XZ305/ahc707/WQUTx1cmxh0tNhg3htk
+HLK029AivIAlmV1nwMoxVlJ32/U15u3SwAHkWhcJLWJM5xuC3BS1DAEioVUnUYLD
+ZXR3IB/AkDXCvx+zfCXsOU9KewZ5cBed18IjqmryiFoAFma5YzdFnNM2eoUt96AZ
+TFBzdXLqHehdEzNlXDg7F3e02H36eLNBnyrNwpK01xrrL487DK4zfEMIwnen+JfK
+V9HTz050X1PrnIXluKqTZ8MVkhEtqdLHQEi9i1xuviXljh4/7X494bYh6SQleCe+
+bMH9Dggby+tqwTmczqd8uoDcJHQzhgO5Oz976SxuKX7El4x9i4lu6vUXYLV4/LU7
+apLZ3iWLi6tLsN9Kgdmg4cfeZzf4mB58CL8JH70pTshGbX9SsNCkbwsKHF7EL5ci
+2lSRnbDV3v6KoGlBiVVueYVQshYKnszA7+p6FeXZclVfuVmnx7DFIk5t99rgZHeI
+hTkbSpKLJBUAeU9hiPV1pUegMWl+HZ2M0tDDru6H4BIeM9sgCq1KbNmdH4dQEu1p
+XoUzSEtSv6gSzVcWxOC85C9vtSMK4KmHbwX5NaTdslxtP/6vY/4UbQIRURBcNZq7
+6ve0hBmIz4/AMTpdX1YiYwsEdu0DVtUQPUB6wZPuUFt5Zzr0co5pS7T32fFYYBWJ
+iWyqeuj9P4DNlzDq1zu+Ih+OKRXOzC1MzVqLkxjTc3jLpDTFAk4KsM3WL7fZQiKg
+eG5iN6shWgURJuQ34iPN66Y/CGWVjRg/PCDA7dfYxoDghqxksyqNbn6OPkzWA3cn
+LV8Hnpa4czhaY8VSmPjNiWpQlvT5Gzfw83tue31fTHSs1gi+ZV0KeXpl7whRrVk7
+oyYU6NjEB808zD+Vr0iMDPZ+ilsc+RmJzpPKvERkOqm1ifH0IyOM+kR9LIWpUqRI
+k33/HJjbU4CJ/FyKP3/8/8+SLP0GxXWP48RY1Raz+ldgWu0VrZ2+6L/Y0lZ+O1WN
+hPB0gNp5efdhiQhryF75jLVFjYmqMVh+QLzPuqrhMQEDyWK1p/0JX0f7YT0UvCaR
+tXCxgFE9FrZyRaJdi3Cx8SZsgdViX5yH9BKJ2hlXgQ5hjV3/nZ6ThCpLMtvkIPiv
+3gcWbyf6PEsNVAaFedzcqDN5uE7WmX0fvTaJFzwVTRzqkuuofiEHV+YKBBeWpxlP
+iStwqA/ZmI9T9HBDTzhtlExIHUbUdxRtNMTxDXDZBgmg7O/PUTRyNNDmoXUDyJ/z
+9x3Ucq5k+f2mXHFDKPSmwv8AIp9PBMm20a4JjF38nb9+6HCZGtCbB0pDVNV9vY1U
+U6dIBuqoEL2N5vYV9Egy9TLKRjXhX2aSNzsBEoatopOgEU5xQ93fV27g1jWVrkAL
+3oL1m1k+C0mHj41pcAgb7A1G+B+C82/9KJ0oZDRayP8YS4uIs7mSNfx2M0ayJg1/
+5ubEdd3rX1YJpClibUMazx7AlZvrSlXHdZ3znHZUGsXmSMngSRMKYft/+QT0bYP8
+4RahOtIMt6POKwU2WCFvAWuj+U7GL7R+Gpdp+9AsW6x1U5C1asM74thOumkhnEO3
+KAex4Qw+SzaqImNqxgJa95WuFJesG6JAhc8+AyTdEZ5rDjExXNgy/PjJvKQQiiAY
+1Vs3FvM39wAYU6cxK8+DKeJw8p4cnIUS8p3YB0dIp0L/mTAY69qZfIohrsWM6Guw
+k1x4dhi9dmqW6tSZLzoRFteTLrzp62SytcMuLgqKrd5/3b6aOXqnHwyR6GUig54R
+/iQ5yg58fS67Jb4JAn9OOcqIpO2kBL206RAd6jPv3z51w46JALnWiMUUgWkq/dLj
+XZA3QoQBo/euCJh/FQRw+UXPpfi6v5Gdl8KsgoHJvL+WX9TS5TJ7SPdnuklH2K/6
+RTQXVg2wBwAWPaZ4Fg0e/1NgKsaWoCsWI9WVs/+ISrprmq7jdfshXqgqCmC8x6iM
+x+U6ENPbOGJu2dAtUzCwUlF+EHnYaAREBoTZrzN5AHoCwSY2hwYU0EKifwL2ixSq
+u4P0XOsl7IE8KCBB2qXS8lBeBIud3NmUFvak4IV5sQNJkUHz9Afs6VDWPm5dPjBU
+lFlHR+qZkhC3rsS7pjUzldL/iGHw1X8jakXKDZPqlSMnUhp6o0zzu/+SeDEoUNix
+NCIrJGY0PqB3ZYqMFo3kv5sUShVaZ0Cw9MdCJuBIy9KRMe+MNTx96qkYakY1Ryhd
+GueCbS82PSnzgOe0LWZWtR4jGusG0+crSo1SfQYGIW8VYw/pC4RPycxS4EiJy6BE
+cHAdGC/HR79mDmbXwp8PEiMY8JCBbkHoWW4fAgMBAAGjgeEwgd4wHQYDVR0OBBYE
+FLAykYUURZ3cPhMDOf3HasfowMWkMIGhBgNVHSMEgZkwgZaAFLAykYUURZ3cPhMD
+Of3HasfowMWkoXSkcjBwMRowGAYDVQQDExFzZm8tZncwMS1sb2NhbC1jYTELMAkG
+A1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExDDAKBgNVBAcTA3NmbzEPMA0G
+A1UEChMGc3ltYmlvMREwDwYDVQQLEwhzZm8tbWdtdIIIMojTQKyvDdswDAYDVR0T
+BAUwAwEB/zALBgNVHQ8EBAMCAQYwDQYJKoZIhvcNAQENBQADgggBAFlpineF+JPX
+8oAGcEn1RDTxhpmN2iZdFuLta6one9pz0mcAFqckqUJQTU+JHzwVvU14Ze3U0tBC
++PeznmQ03Tqc/0w/PJW0TBI51UxuHh9HAhAd1hWN+UcKaV4XJeHEHeaA9EuxzF+c
+SgWO52rZwn8hkDGBNayj3uGPAFyZCEMi/7750/XNx0b+KMGlVtRVTz30dhHvszb3
+AP6qG1gPkdFCM0tmCRPx6oT4D/KHOKmGQCsOS/PK0Ed2FXYtJSOWITr1WVl+SZ/L
+qbVd2NYtWqXzDYuvVKZuXv0Si9Kz7fHckgHILX6s8NkbieqxSQx9pMvkAGm2/CGf
+/b2d8yOqmkqpCprfY1Ewbdl7luLRyHjJMchMoK1xJMUWwQ4SjxSmsW5Vw5nLkoJS
+GyUV69GVHo951aEEMLLMgnsrWppEUzdtO0f5KRd/aReWKzmaiDU0GOisSjGGWjvf
+IP8JWOZ3ZaVeN7Pn65KWJ4DQ05Q2HKBf7IMzfwlUuIlyGAMZ7K1UgPdOSVPWdK5Z
+ccEmbII+SoRHRagaext6zPipvnAQoNyDmLIzC1m3Ns8CSmcPkxXdt7cvdBEgYhAs
+Zxtau6y4Ctu+cUxDLLAQj3UblRlhXFCyDbUec5jjI6Fc3rgTHio6GWF52G4/oaA5
+6Q6q/ylt6eNqpklqZYc3vdM/q1FsGrjSbliSrO92Cz8jv7T8eD5f8U9ZkWYXFJxV
+re9ASeDfah+jyJ/t2jiUB+GY+2svwLQwRgvIGIY8lt3W41o/okd1spuAmyLPvSPa
+2AOYRBaIlgq8V30Ckrj6Lke9WWg5VwZSHWzoVeZNroXLnJ8G1xWzvTgpGLV24QHB
+sp9ZMfBzADmkflQXCu3gBF7v4YWnVw5vdHfrwntnG1W9d2gxCyBEtg2w7IINpltV
+zMth3fAfY63Vofqger0sKrrY4U6TLhBxvRifyLfLjUra4H3GrKGxzhymiI5Lh76R
+5sb3lZRwGwjNcbYHRjbwH9RTCPyGUb8CzSxa5I9gxCAxV3JttThW0R4SdVJm+xOd
+U2qigln3aVFaX921XHPb4FQsxdDY9Lz6pbPMsIMdCAZ9PqQOdBje4uUCrP+CYwDF
+t2ivsjUZlTqaLa/zbUy1mEqahGpJnzG7qF7zLX6lo7j7+nwG2OSEs8+FSoEBx/E8
+P9vdP6wJtdNHRqsRCdFOeJ1RanDnkfYInjrEtd0ZrM4fkrQr69Orb7tzRN6C9UJJ
++fRHzYKuau5emEgoNjMLOgjZcX85BcHZ/QKBsZtpeH1zjFKOWLaj79kIImNft9tg
+HBO0Zyf7qwgZzSzm0JEX/HHOo8jYgZgQ3tDld5jUvVxbO6KPoY6TlTRt6GwOBt0g
++20nsxjv3r1WXC0X7veCHvmVAVr/EhojQctD2o/XAPRkc+h9/YCjKrYOQF4E8lWU
+BwKzBMYfa66XL3Tq3QGxLLrAWTKG4Q+wvV3NWoAEGYK135ECxuqeKxlljkYuzrcE
+jjZXSdbHkiUWj/sDoLQchj4KhSqmwxA+1UOOF+xKWrf7iIOWlH4m7Q51QOSWOnfJ
+dvQJo/CUGwzQAwxB894KPIx43nwE3LXERnW+2xKXZsd8TLNpmTYdqFopSRS19jxJ
+s5RCGq1TFQW/PHk4pCrOCsW4Dea1Q+M43dkhWoHKRX55MRd3CC85v/unJx1mo0S8
+V+Rnfy8i0S+qax9OwnfPyjYnMhuLVjzKw7agFV/Bj8apTcMXLqsZtiibPIfvx66k
+wLFh8YCwXxtpkHbJHRJsR6NeJyAa50N0PDOqgc04WEci+qh239fa1LhYBzxhMfEf
+Fr0C5aQd509KgtWhvxIoTwr6yLvVOtKj4gFomZoyObTP64Xvf7THNUBQhl863lnB
+N2lQV1PyZRSQKCxoiB1G5M9+VtehxeFRBmpBvkfO5j30x4MROqZiReWjbr4DEdr3
+ukwcF26ZTz92hekzIpR2cAbnsJAGsC7hZsyrkdcEAgWjijs3wELlKtaxLc1kVmWK
+yPadg5mzjh9t4oh9XzFwif1+KJ+XvRUNg+4TIIBw4BVXBFlABY+spvQ1qw5bZV/U
+1oVcXcKyex/i7Aw8u3G4tAh0F75sc4GO/ME+RKn/HgnHp+ZwtjYUVop/e+evcsY7
+vjRxBKZIfdNd66uDsPVclRfdTTuoT6LsZb7mv0irqZe7VJTxAGeScj0qwPNac6hB
+8FI0yR13dqpASOBMHO9Tx2t+8gq6au+PuJ+lKb6UX4rzicTWFwG9rITfGjCaMWxq
+tVPc/NDp8DwHMCZF+krmVEX5Kf2T/s13BihKNofPXl2nkEHZxmNGmp25QUAfxhG8
+pQ0YqHoowJMc6ExOrTFpgWSds0iRH6HOIX8vx1nauzaZbVZCwwLb8P1JzKafYTNt
+0VpqOG9l3AK0NsQb6IFCrc8EGCR4gvBMF5vrU7eTGZ4pzCGXUMjRTRZ6u7FaWjP9
+yZ0uk/wczPNbKbBcEtbiI49GEb/LlWqOk7Kms3xGwR/ce2/mFInH8oy6R0T2Ecbc
+z8Tae5LmIzclhKVa8NstPfa4/3EicgzRZfIqJ+Q6rW7KUnV5HDJzhO0bo3duZzoA
+/FXI8WZtXEzrjLkZ6Psil3HhORtO/MeCupyGKtDfuvpw5jqEx/IWzCQOLivMxXya
+3m8D235czQg7TFVzZ/7JmIIwKOn0TtdXRxLBN+qB3WGZShhVNQIUivXtOlbYpuNZ
+8U0gKc17KN9M8Jdgk9ybpNxhk33SdpVz
+-----END CERTIFICATE-----
+</ca>
+<cert>
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+</cert>
+<key>
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
+</key>
+key-direction 1
+<tls-auth>
+#
+# 2048 bit OpenVPN static key
+#
+-----BEGIN OpenVPN Static key V1-----
+a3927e06295441c904210d76ea951fe6
+87295ebbbe490279792a6d15c6bc3915
+a42258d4958a3c3c2afef12c5e3f8211
+2b8c3eb3093cac22434ffad4e423359a
+4243fe124b463accc426b32be22a6539
+7b9171e5085173fcbc3c658876b7a25d
+53ae67480ce86ec9a8ebf6123d7686fd
+54707c27555cb3aa2e14ddef05382e36
+e2bcada0ad8df69b36275bd33a4f8e24
+38a943a776fe45f7045e47e45a7fa85a
+b7cb5b1007caa446157ccc9ce8a2aeb8
+1dd7fd4feaa6e02b43b50fb401fe070b
+e80d0ea97ec2bf85cafefdc098c295f9
+c114b6927e1703178d5f4f7be5ab7709
+67a92c9f403a45f886bcc7cae253865a
+39286ac0f91895a15e6ea3303e26d5d0
+-----END OpenVPN Static key V1-----
+</tls-auth>
diff --git a/users/openvpn/mgmt-sfo-fw01-UDP4-1194-jsutter-config.ovpn b/users/openvpn/mgmt-sfo-fw01-UDP4-1194-jsutter-config.ovpn
new file mode 100644
index 0000000..34c90b0
--- /dev/null
+++ b/users/openvpn/mgmt-sfo-fw01-UDP4-1194-jsutter-config.ovpn
@@ -0,0 +1,124 @@
+dev tun
+persist-tun
+persist-key
+data-ciphers AES-128-GCM:AES-128-CBC
+data-ciphers-fallback AES-128-GCM
+auth SHA256
+tls-client
+client
+resolv-retry infinite
+remote mgmt-sfo-fw01.symbiosystems.net 1194 udp4
+lport 0
+verify-x509-name "mgmt-sfo-fw01.symbiosystems.net" name
+auth-user-pass
+remote-cert-tls server
+explicit-exit-notify
+
+<ca>
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+</ca>
+<cert>
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+</cert>
+<key>
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
+</key>
+key-direction 1
+<tls-auth>
+#
+# 2048 bit OpenVPN static key
+#
+-----BEGIN OpenVPN Static key V1-----
+2cd2f9601c3e6dcf0680b0f3f488c9b9
+c3020d0b24fe0e7e926ba3095787b431
+7047e692d0e59f3fefa3e727c51dbbb9
+fb0a0c34895418601080fbcbc67e0179
+12f3ee6a4d34c5ed0499646f26e67bed
+09b017d9335e605551d045d826bce436
+6ee8d03c1aa4e19dcaedbdb8071ebb9f
+d0a6a8a8e2c0a79bbfbf958150e7b850
+63a4710dd76e50efc45cfc1ad7c5504d
+d25918b644a997bc4d2753b3bdcfd695
+7ad17754842e57365b7cad3aa7629e05
+f36037bee290fe1ba8800bc26fd4f741
+b5c01b798357047976f2a42896d0ed8e
+dbd7cc3043326f494b02b5635fa76352
+386abc1182903b23b1af88b8bb76b75e
+ca5788865859403d48d52e47c46d8bba
+-----END OpenVPN Static key V1-----
+</tls-auth>