Nub's Public Key

configuration.nix

@@ -56,7 +56,7 @@
       # This allows the wireguard server to route your traffic to the internet and hence be like a VPN
       # For this to work you have to set the dnsserver IP of your router (or dnsserver of choice) in your clients
       postSetup = ''
-        ${pkgs.iptables}/bin/iptables -t nat -I POSTROUTING -s 10.100.0.0/24 -o eno4 -j MASQUERADE
+        ${pkgs.iptables}/bin/iptables -t nat -A POSTROUTING -s 10.100.0.0/24 -o eno4 -j MASQUERADE
       '';
 
       # This undoes the above command
@@ -75,7 +75,7 @@
         # List of allowed peers.
         { #nub
           # Public key of the peer (not a file path).
-          publicKey = "L4msD0mEG2ctKDtaMJW2y3cs1fT2LBRVV7iVlWZ2nZc=";
+          publicKey = "j2WrE1lX5Pf12Yk61zzCUJCnzVQyR+s+nWw72a4gsik=";
           # List of IPs assigned to this peer within the tunnel subnet. Used to configure routing.
           allowedIPs = [ "10.100.1.0/24" ]; 
         } 
@@ -101,6 +101,7 @@
   virtualisation.podman.defaultNetwork.settings.dns_enabled = true;
 
   environment.systemPackages = [
+    pkgs.git
     pkgs.bash
     pkgs.wget
     pkgs.curl

services/gitea.nix

@@ -31,8 +31,8 @@
       passwordFile = "/run/keys/gitea-dbpassword"; # config.sops.secrets."postgres/gitea_dbpass".path
     };
     settings.server = {
-      DOMAIN = "git.fallingsky.love";
-      ROOT_URL = "https://git.fallingsky.love/";
+      DOMAIN = "git.skymath.duckdns.org";
+      ROOT_URL = "https://git.skymath.duckdns.org/";
       HTTP_PORT = 3001;
     };
   };

wg-publickey

@@ -0,0 +1 @@
+M9QXz6kgLejkhi2mcxxdWhTmGWkbhgblQnA3KfyHqlo=