Switch to the operator LAN subnet

modules/networking.nix

@@ -24,7 +24,7 @@ in
   systemd.network.networks."24-home" = {
     name = "enp2s0";
     matchConfig.Name = "enp2s0";
-    address = [ "192.168.129.2/23" ];
+    address = [ "192.168.128.2/23" ];
     gateway = [ "192.168.128.1" ];
     dns = [
       "1.1.1.1"
@@ -56,6 +56,11 @@ in
       wireguard_port # Wireguard
       53 # DNS
     ];
+    extraCommands = ''
+      iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o ${
+        config.systemd.network.networks."24-home".name
+      } -j MASQUERADE
+    '';
   };
 
   # Wireguard setup
@@ -104,7 +109,7 @@ in
 
       listen-address = [
         "127.0.0.1"
-        "192.168.129.2"
+        "192.168.128.2"
         "10.8.0.1"
       ];
       bind-interfaces = true;
@@ -116,7 +121,7 @@ in
       conf-file = "${pkgs.dnsmasq}/share/dnsmasq/trust-anchors.conf";
       dnssec = false;
 
-      address = "/coolneng.duckdns.org/192.168.129.2";
+      address = "/coolneng.duckdns.org/192.168.128.2";
     };
   };