Forward traffic from apex to ethernet via NAT

m/raccoon/configuration.nix

@@ -44,6 +44,13 @@
     };
   };
 
+  # Mount the NFS home
+  fileSystems."/nfs/home" = {
+    device = "10.106.0.30:/home";
+    fsType = "nfs";
+    options = [ "nfsvers=3" "rsize=1024" "wsize=1024" "cto" "nofail" ];
+  };
+
   nix.settings = {
     extra-substituters = [ "https://jungle.bsc.es/cache" ];
     extra-trusted-public-keys = [ "jungle.bsc.es:pEc7MlAT0HEwLQYPtpkPLwRsGf80ZI26aj29zMw/HH0=" ];

m/raccoon/wireguard.nix

@@ -1,6 +1,13 @@
-{ config, ... }:
+{ config, pkgs, ... }:
 
 {
+  networking.nat = {
+    enable = true;
+    enableIPv6 = false;
+    externalInterface = "eno0";
+    internalInterfaces = [ "wg0" ];
+  };
+
   networking.firewall = {
     allowedUDPPorts = [ 666 ];
   };
@@ -25,8 +32,9 @@
         {
           name = "apex";
           publicKey = "VwhcN8vSOzdJEotQTpmPHBC52x3Hbv1lkFIyKubrnUA=";
-          allowedIPs = [ "10.106.0.30/32" ];
+          allowedIPs = [ "10.106.0.30/32" "192.168.0.0/24" ];
           endpoint = "ssfhead.bsc.es:666";
+          persistentKeepalive = 25;
         }
       ];
     };