things

nixos/hosts/olympus/wireguard/configuration.nix

@@ -55,6 +55,11 @@ let vs = config.vault-secrets.secrets; in
         publicKey = "ZWIaDGrASlTkEK75j10VeGCvrIGfpk4GPobmqcYX2D0=";
         allowedIPs = [ "10.100.0.3/32" ];
       }
+      {
+        # Laptop
+        publicKey = "L8myt2bcdja7M+i+9eatdQRW8relPUoZZ9lEKSLe+m8=";
+        allowedIPs = [ "10.100.0.4/32" ];
+      }
     ];
   };
 }

nixos/hosts/other/null/configuration.nix

@@ -57,6 +57,7 @@ in
   # Enable the GNOME Desktop Environment.
   services.xserver.displayManager.gdm.enable = true;
   services.xserver.desktopManager.gnome.enable = true;
+  services.udev.packages = with pkgs; [ gnome.gnome-settings-daemon ];
 
   services.xserver = {
     layout = "us";
@@ -101,6 +102,10 @@ in
     pciutils
     nvidia-offload
     vim
+    wireguard-tools
+
+    gnomeExtensions.appindicator
+    gnomeExtensions.wireguard-indicator
   ];
 
   programs.steam = {
@@ -111,6 +116,21 @@ in
 
   services.fstrim.enable = true;
 
+  # Allow reverse path for wireguard
+  networking.firewall = {
+    # if packets are still dropped, they will show up in dmesg
+    logReversePathDrops = true;
+    # wireguard trips rpfilter up
+    extraCommands = ''
+      ip46tables -t raw -I nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN
+      ip46tables -t raw -I nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN
+    '';
+    extraStopCommands = ''
+      ip46tables -t raw -D nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN || true
+      ip46tables -t raw -D nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN || true
+    '';
+  };
+
   # This value determines the NixOS release from which the default
   # settings for stateful data, like file locations and database versions
   # on your system were taken. It‘s perfectly fine and recommended to leave

nixos/hosts/other/null/home.nix

@@ -6,6 +6,7 @@
   home.packages = with pkgs; [
     discord
     rnix-lsp
+    fusee-launcher
   ];
 
   programs.home-manager.enable = true;