[ns1] deploy on fanny

machines/modules/malobeo/peers.nix

@@ -65,4 +65,11 @@
     allowedIPs = [ "10.100.0.20/32" ];
     publicKey = "Pp55Jg//jREzHdbbIqTXc9N7rnLZIFw904qh6NLrACE=";
   };
+
+  "ns1" = {
+    role = "client";
+    address = "10.100.0.21";
+    allowedIPs = [ "10.100.0.21/32" ];
+    publicKey = "jozMsP5MA2uz7eOrXG8LB8mr2tHVa6FL1+tbMQs9ySk=";
+  };
 }

machines/modules/malobeo/wireguard.nix

@@ -72,6 +72,7 @@ in
           mtu = 1340; #seems to be necessary to proxypass nginx traffic through vpn
           address = [ "${myPeer.address}/24" ];
           autostart = cfg.autostart;
+          dns = peers.ns1.address;
           listenPort = mkIf (myPeer.role == "server") myPeer.listenPort;
 
           # This allows the wireguard server to route your traffic to the internet and hence be like a VPN