[fanny] fix flushing init vpn

machines/fanny/configuration.nix

@@ -91,10 +91,10 @@ in
 
   boot.initrd = {
     availableKernelModules = [ "wireguard" ];
-    postMountCommands = ''
+    # postMountCommands = ''
-      ip address flush dev wg-initrd
+    #   ip address flush dev wg-initrd
-      ip link set dev wg-initrd down
+    #   ip link set dev wg-initrd down
-    '';
+    # '';
     systemd = {
       enable = true;
       network = {

machines/modules/malobeo/initssh.nix

@@ -45,6 +45,20 @@ in
           initrdBin = [ pkgs.busybox pkgs.wireguard-tools pkgs.iproute2 ]; 
           enable = true;
           network.enable = true;
+          services."stopInitVpn" = {
+            description = "stop init vpn";
+            wantedBy = [
+              "initrd.target"
+            ];
+            after = [
+              "zfs.target"
+            ];
+            serviceConfig.StandardOutput = "journal+console";
+            script = ''
+              networkctl down wg-initrd
+            '';
+            serviceConfig.Type = "oneshot";
+      };
         };
         network = {
           flushBeforeStage2 = true;