wireguard public key

configuration.nix

@@ -56,7 +56,7 @@
       # This allows the wireguard server to route your traffic to the internet and hence be like a VPN
       # For this to work you have to set the dnsserver IP of your router (or dnsserver of choice) in your clients
       postSetup = ''
-        ${pkgs.iptables}/bin/iptables -t nat -I POSTROUTING -s 10.100.0.0/24 -o eno4 -j MASQUERADE
+        ${pkgs.iptables}/bin/iptables -t nat -A POSTROUTING -s 10.100.0.0/24 -o eno4 -j MASQUERADE
       '';
 
       # This undoes the above command
@@ -101,6 +101,7 @@
   virtualisation.podman.defaultNetwork.settings.dns_enabled = true;
 
   environment.systemPackages = [
+    pkgs.git
     pkgs.bash
     pkgs.wget
     pkgs.curl

services/gitea.nix

@@ -31,8 +31,8 @@
       passwordFile = "/run/keys/gitea-dbpassword"; # config.sops.secrets."postgres/gitea_dbpass".path
     };
     settings.server = {
-      DOMAIN = "git.fallingsky.love";
-      ROOT_URL = "https://git.fallingsky.love/";
+      DOMAIN = "git.skymath.duckdns.org";
+      ROOT_URL = "https://git.skymath.duckdns.org/";
       HTTP_PORT = 3001;
     };
   };

wg-publickey

@@ -0,0 +1 @@
+M9QXz6kgLejkhi2mcxxdWhTmGWkbhgblQnA3KfyHqlo=