Remove intranet route from apex peer in raccoon

We only need apex to reach the intranet so it will be raccoon the only
peer that uses intranet IPs as source. All other peers must accept them
from raccoon, but not the other way around.

m/raccoon/wireguard.nix

@@ -32,7 +32,7 @@
         {
           name = "apex";
           publicKey = "VwhcN8vSOzdJEotQTpmPHBC52x3Hbv1lkFIyKubrnUA=";
-          allowedIPs = [ "10.106.0.30/32" "192.168.0.0/16" ];
+          allowedIPs = [ "10.106.0.30/32" ];
           endpoint = "ssfhead.bsc.es:666";
           persistentKeepalive = 25;
         }