modules/networking.nix

@@ -44,6 +44,9 @@
       138 # Samba
       1194 # Wireguard
     ];
+    extraCommands = ''
+      iptables -t nat -A POSTROUTING -s 10.9.0.0/24 -o eth0 -j MASQUERADE
+    '';
   };
 
   # Enable NAT for wireguard
@@ -62,9 +65,16 @@
       peers = [
         # Amin
         {
+          # Placeholder public key
           publicKey = "XMkTztU2Y8hw6Fu/2o4Gszij+EmNacvFMXuZyHS1n38=";
           allowedIPs = [ "10.9.0.2/32" ];
         }
+        # Fernando
+        {
+          # Placeholder public key
+          publicKey = "XMkTztU2Y8hw6Fu/2o4Gszij+EmNacvFMXuZyHS1n38=";
+          allowedIPs = [ "10.9.0.3/32" ];
+        }
       ];
     };
   };