fixed wireguard and added ausweisapp

flake.lock

@@ -78,11 +78,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1673704454,
-        "narHash": "sha256-5Wdj1MgdOgn3+dMFIBtg+IAYZApjF8JzwLWDPieg0C4=",
+        "lastModified": 1673800717,
+        "narHash": "sha256-SFHraUqLSu5cC6IxTprex/nTsI81ZQAtDvlBvGDWfnA=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "a83ed85c14fcf242653df6f4b0974b7e1c73c6c6",
+        "rev": "2f9fd351ec37f5d479556cd48be4ca340da59b8f",
         "type": "github"
       },
       "original": {

hosts/thinkpad/default.nix

@@ -10,6 +10,7 @@
       ./modules/networks
       ./modules/lightdm
       ../../shared/vim.nix
+      ../../shared/ausweisapp.nix
       ../../shared/input.nix
       ../../shared/sops.nix
       ../../shared/gpg.nix

hosts/thinkpad/modules/networks/default.nix

@@ -99,20 +99,16 @@
     };
     networks."30-dorm" = {
       matchConfig.Name = "dorm";
-      networkConfig = {
-        Address = "10.10.10.3/24";
-        DNS = "10.10.10.1";
-        DNSDefaultRoute = true;
-      };
-      linkConfig = {
-        ActivationPolicy = "manual"; #manual activation cause sometimes the endpoint can't be resolved
-      };
+      addresses = [
+        {
+          addressConfig = {
+            Address = "10.10.10.3/24";
+            RouteMetric = 30;
+          };
+        }
+      ];
       routes = [
-        # Somehow systemd-networkd always creates a route to 10.10.10.0/24 with metric 0 and regardless how I set it,
-        # my settings are ignored and set to 0. Route below would do it right, as soon as I find out how I can deacivate
-        # the metric 0 one, this will be uncommented
-        #{ routeConfig = { Gateway = "0.0.0.0"; Destination = "10.10.10.0/24"; Metric = 50; }; }
-        { routeConfig = { Gateway = "0.0.0.0"; Destination = "192.168.10.0/24"; Metric = 50; }; }
+        { routeConfig = { Gateway = "0.0.0.0"; Destination = "192.168.10.0/24"; Metric = 30; }; }
       ];
     };
   };

shared/ausweisapp.nix

@@ -0,0 +1,7 @@
+{ config, ... }:
+{
+  programs.ausweisapp = {
+    enable = true;
+    openFirewall = true;
+  };
+}