From 97748edc3f0290e1c9b43e72cb6c7e704c5b51fb Mon Sep 17 00:00:00 2001
From: Danilo Reyes <CaptainJawZ@protonmail.com>
Date: Sun, 21 Sep 2025 11:36:59 -0600
Subject: [PATCH] wg & syncthing properly talk through subnet

---
 hosts/server/configuration.nix | 8 ++++++--
 modules/modules.nix            | 1 +
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/hosts/server/configuration.nix b/hosts/server/configuration.nix
index 34932c7..651931b 100644
--- a/hosts/server/configuration.nix
+++ b/hosts/server/configuration.nix
@@ -21,7 +21,8 @@
         |> map (srv: srv.port);
       ports = enabledPorts ++ [
         2049 # idk
-        8384 # syncthing
+        8384 # syncthing gui
+        22000 # syncthing relay
         3452 # sonarqube
         config.services.gitea.settings.server.SSH_PORT
       ];
@@ -40,7 +41,10 @@
           {
             publicKey = "dFbiSekBwnZomarcS31o5+w6imHjMPNCipkfc2fZ3GY=";
             endpoint = "${config.my.ips.vps}:51820";
-            allowedIPs = [ "${config.my.ips.wg-vps}/32" ];
+            allowedIPs = [
+              "${config.my.ips.wg-vps}/32"
+              "${config.my.ips.wg-friends}/24" # all friends
+            ];
             persistentKeepalive = 25;
           }
         ];
diff --git a/modules/modules.nix b/modules/modules.nix
index 0da8b8d..d537582 100644
--- a/modules/modules.nix
+++ b/modules/modules.nix
@@ -56,6 +56,7 @@ in
         wg-vps = "10.77.0.1";
         wg-server = "10.77.0.2";
         wg-friend1 = "10.8.0.2";
+        wg-friends = "10.8.0.0";
       };
       description = "Set of IP's for all my computers.";
     };