"fixes"

modules/services/wireguard.nix

@@ -1,7 +1,6 @@
 {
   config,
   lib,
-  pkgs,
   ...
 }:
 let
@@ -20,32 +19,36 @@ in
         internalInterfaces = [ "wg0" ];
       };
       wireguard.interfaces.wg0 = {
-        ips = [ "10.100.0.1/24" ];
+        ips = [
+          "${config.my.ips.wg-vps}/24"
+          "10.8.0.1/24"
+          "10.9.0.1/24"
+        ];
         listenPort = port;
-        postSetup = ''
-          ${pkgs.iptables}/bin/iptables -t nat -A POSTROUTING -s 10.100.0.0/24 -o ${interface} -j MASQUERADE
-        '';
-        postShutdown = ''
-          ${pkgs.iptables}/bin/iptables -t nat -D POSTROUTING -s 10.100.0.0/24 -o ${interface} -j MASQUERADE
-        '';
+        postSetup = "";
+        postShutdown = "";
         privateKeyFile = config.sops.secrets."wireguard/private".path;
         peers = [
           {
-            publicKey = "ciupBjCcIpd3K5vlzNMJC8iiyNqB9xXwkSC6UXPKP3g=";
-            allowedIPs = [ "10.100.0.2/32" ];
-          } # phone
+            publicKey = "OUiqluRaS4hmGvLJ3csQrnIM3Zzet50gsqtTABaUkH4=";
+            allowedIPs = [ "${config.my.ips.wg-server}/32" ];
+          }
           {
-            publicKey = "JgeA1ElDwR7oLmyGn8RzvxiscMBhR8+L+mEjY1Cq7gk=";
-            allowedIPs = [ "10.100.0.3/32" ];
-          } # tablet
+            publicKey = "rFgT6TXzRazK6GMazMNGjtOvzAAPST0LvCfN7QXsLho=";
+            allowedIPs = [ "${config.my.ips.wg-friend1}/32" ];
+          }
           {
-            publicKey = "giPVRUTLtqPGb57R4foGZMNS0tjIp2ry6lMKYtqHjn4=";
-            allowedIPs = [ "10.100.0.15/32" ];
-          } # jeancarlos
+            publicKey = "R1CTx5+CXivMI6ZEmRYsyFUFILhe6Qnub0iEIRvvrEY=";
+            allowedIPs = [ "${config.my.ips.wg-friend2}/32" ];
+          }
           {
-            publicKey = "92JdW/NExg1tUE4cEyl6Yn+0Eex+iFVA37ahPRhRnRM=";
-            allowedIPs = [ "10.100.0.16/32" ];
-          } # gorilia
+            publicKey = "ecPNSacD6yVwpnLBs171z0xkw9M1DXKh/Kn70cIBcwA=";
+            allowedIPs = [ "${config.my.ips.wg-friend3}/32" ];
+          }
+          {
+            publicKey = "yg+2miZCrx89znFaUlU/le/7UIPgEAMY74fZfEwz8g4=";
+            allowedIPs = [ "${config.my.ips.wg-friend4}/32" ];
+          }
         ];
       };
     };