clan: add wireguard

clan/network.nix

@@ -17,4 +17,19 @@
       settings.host = "git.turifer.dev";
     };
   };
+
+  clan.inventory.instances.wireguard = {
+    module.name = "wireguard";
+    module.input = "clan-core";
+    roles.controller = {
+      machines.verbena.settings = {
+        endpoint = "wg1.turifer.dev";
+      };
+    };
+    roles.peer.machines = {
+      haze = { };
+      crocus = { };
+      genepi = { };
+    };
+  };
 }

infra/templates/turifer.dev.zone

@@ -30,3 +30,10 @@ buildbot.turifer.dev. 10800 IN A ${addr}
 %{ for addr in verbena_ipv6_addresses ~}
 buildbot.turifer.dev. 10800 IN AAAA ${addr}
 %{ endfor ~}
+
+%{ for addr in verbena_ipv4_addresses ~}
+wg1.turifer.dev. 10800 IN A ${addr}
+%{ endfor ~}
+%{ for addr in verbena_ipv6_addresses ~}
+wg1.turifer.dev. 10800 IN AAAA ${addr}
+%{ endfor ~}