✨ wireguard add ipv6, even though it does not seem to work

hosts/hydrogen/services/gitea/default.nix

@@ -9,8 +9,6 @@
   services.gitea = {
     enable = true;
     package = pkgs.forgejo;
-    domain = "git.fainsin.bzh";
-    rootUrl = "https://git.fainsin.bzh";
     lfs.enable = true;
     database = {
       type = "postgres";
@@ -18,20 +16,24 @@
     };
     settings = {
       service = {
-        "DEFAULT_KEEP_EMAIL_PRIVATE" = true;
+        DEFAULT_KEEP_EMAIL_PRIVATE = true;
-        "DISABLE_REGISTRATION" = true;
+        DISABLE_REGISTRATION = true;
+      };
+      server = {
+        LANDING_PAGE = "explore";
+        ROOT_URL = "https://git.fainsin.bzh";
+        DOMAIN = "git.fainsin.bzh";
       };
-      server = { "LANDING_PAGE" = "explore"; };
       indexer = {
-        "REPO_INDEXER_ENABLED" = true;
+        REPO_INDEXER_ENABLED = true;
-        "REPO_INDEXER_PATH" = "indexers/repos.bleve";
+        REPO_INDEXER_PATH = "indexers/repos.bleve";
-        "UPDATE_BUFFER_LEN" = 20;
+        UPDATE_BUFFER_LEN = 20;
-        "MAX_FILE_SIZE" = 1048576;
+        MAX_FILE_SIZE = 1048576;
-        "REPO_INDEXER_EXCLUDE" = "node_modules/**";
+        REPO_INDEXER_EXCLUDE = "node_modules/**";
       };
       session = {
-        "PROVIDER" = "db";
+        PROVIDER = "db";
-        "COOKIE_SECURE" = true;
+        COOKIE_SECURE = true;
       };
     };
   };

hosts/hydrogen/services/wireguard/default.nix

@@ -10,17 +10,17 @@
 
     wireguard.interfaces = {
       wg0 = {
-        ips = [ "10.0.0.1/24" ];
+        ips = [ "10.0.0.1/24" "fd02:002:002::1/64" ];
         listenPort = 5553;
         privateKeyFile = "/root/wg-private";
         peers = [
           { # pixel
             publicKey = "HS2q+PpPPwxqT1jCD7D4puqr4ZyaXV5TostavlYWBx0=";
-            allowedIPs = [ "10.0.0.2/32" ];
+            allowedIPs = [ "10.0.0.2/32" "fd02:002:002::2/64" ];
           }
           { # neodymium
             publicKey = "IFeRvelEilNRLkhWgFKL9HrJ9XYsm+r4yvv23CigETk=";
-            allowedIPs = [ "10.0.0.3/32" ];
+            allowedIPs = [ "10.0.0.3/32" "fd02:002:002::3/64" ];
           }
         ];
       };

hosts/neodymium/configuration.nix

@@ -16,7 +16,7 @@
   networking.wg-quick.interfaces = {
     wg0 = {
       privateKeyFile = "/root/wireguard-keys/private";
-      address = [ "10.0.0.3/24" ];
+      address = [ "10.0.0.3/24" "fd02:002:002::3/64" ];
       dns = [ "10.0.0.1" ];
       peers = [{
         publicKey = "y36/EpLUerwM6NSGsVDCkb37Wj/Z3CI0mPFGatVa0Ws=";