From 68d7c22549d4f98ed85d13a1c3cb4934720db986 Mon Sep 17 00:00:00 2001
From: coolneng <akasroua@gmail.com>
Date: Tue, 4 Mar 2025 17:51:30 +0100
Subject: [PATCH] Switch to the operator LAN subnet

---
 modules/networking.nix | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/modules/networking.nix b/modules/networking.nix
index 999a388..75da796 100644
--- a/modules/networking.nix
+++ b/modules/networking.nix
@@ -24,7 +24,7 @@ in
   systemd.network.networks."24-home" = {
     name = "enp2s0";
     matchConfig.Name = "enp2s0";
-    address = [ "192.168.129.2/23" ];
+    address = [ "192.168.128.2/23" ];
     gateway = [ "192.168.128.1" ];
     dns = [
       "1.1.1.1"
@@ -56,6 +56,11 @@ in
       wireguard_port # Wireguard
       53 # DNS
     ];
+    extraCommands = ''
+      iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o ${
+        config.systemd.network.networks."24-home".name
+      } -j MASQUERADE
+    '';
   };
 
   # Wireguard setup
@@ -104,7 +109,7 @@ in
 
       listen-address = [
         "127.0.0.1"
-        "192.168.129.2"
+        "192.168.128.2"
         "10.8.0.1"
       ];
       bind-interfaces = true;
@@ -116,7 +121,7 @@ in
       conf-file = "${pkgs.dnsmasq}/share/dnsmasq/trust-anchors.conf";
       dnssec = false;
 
-      address = "/coolneng.duckdns.org/192.168.129.2";
+      address = "/coolneng.duckdns.org/192.168.128.2";
     };
   };