fix ese wireguard

hosts/quitte/network.nix

@@ -1,6 +1,8 @@
 { config, lib, ... }:
 {
-  sops.secrets."wg-ese" = { };
+  sops.secrets."wg-ese" = {
+    owner = config.users.users.systemd-network.name;
+  };
   networking = {
     # portunus module does weird things to this, so we force it to some sane values
     hosts = {
@@ -16,6 +18,7 @@
 
     firewall = {
       logRefusedConnections = false;
+      allowedUDPPorts = [ 10000 ];
     };
   };
 
@@ -44,7 +47,6 @@
         EmitLLDP = "nearest-bridge";
       };
     };
-  };
     netdevs."30-wireguard-ese" = {
       netdevConfig = {
         Kind = "wireguard";
@@ -57,23 +59,23 @@
         RouteMetric = 30;
       };
       wireguardPeers = [
+
         {
-        PublicKey = "";
-        AllowedIPs = "0.0.0.0/0";
+          wireguardPeerConfig = {
+
+            PublicKey = "gTWcZ8dAb735kY0vs/LwnBdap5J6+eeHAsLXCu+C52M=";
+            AllowedIPs = "10.20.24.2/24";
+          };
         }
       ];
     };
     networks."30-wireguard-ese" = {
       matchConfig.Name = "wg0";
-    addresses = [
-      {
-        Address = "10.20.24.1/24";
-        # AddPrefixRoute = false;
-      }
-    ];
+      address = [ "10.20.24.1/24" ];
       # networkConfig = {
       #   DNSSEC = false;
       #   BindCarrier = [ "ens3" ];
       # };
     };
+  };
 }