use latest nix versions

modules/nix/default.nix

@@ -4,5 +4,6 @@
     ./index.nix
     ./ld.nix
     ./settings.nix
+    ./latest.nix
   ];
 }

modules/nix/latest.nix

@@ -0,0 +1,14 @@
+{ lib, inputs, config, pkgs, ... }:
+with lib;
+let
+  cfg = config.custom.nix;
+in
+{
+  options.custom.nix = {
+    useLatest = mkEnableOption "Use latest nix versions";
+  };
+
+  config = mkIf cfg.useLatest {
+    nix.package = pkgs.nixVersions.latest;
+  };
+}

modules/services/wireguard.nix

@@ -37,6 +37,14 @@ in
       networking.nat.internalInterfaces = [ "wg0" ];
       networking.firewall.allowedUDPPorts = [ 51820 ];
 
+        #[Interface]
+        #PrivateKey = <your private key here>
+        #Address = 192.168.2.20/24
+        #[Peer]
+        #PublicKey = vyHNUy97R1cvqEvElznPpFQtoqm7WUHnT96UP6Dquwc=
+        #AllowedIPs = 192.168.2.0/24
+        #Endpoint = kopatz.dev:51820
+        #PersistentKeepalive = 25
       networking.wg-quick.interfaces = {
         wg0 = {
           autostart = true;
@@ -117,6 +125,14 @@ in
               ];
               publicKey = "AGBWzMeSTxmB3jwNdROYHbyiqhhAVyofMV5Ku5JIE1A=";
             }
+            # more keys
+            # unused
+            {
+              allowedIPs = [
+                "192.168.2.100/32"
+              ];
+              publicKey = "Oj2IYrHgPhIvN+s2oi9kpqN48BXjkYMr4J/z6Baqv0Q=";
+            }
           ];
           privateKeyFile = config.age.secrets.wireguard-private.path;
         };