Update nixpkgs 2025-12-05-02-03

flake.lock

@@ -650,11 +650,11 @@
     },
     "nixpkgs_5": {
       "locked": {
-        "lastModified": 1763421233,
+        "lastModified": 1764667669,
-        "narHash": "sha256-Stk9ZYRkGrnnpyJ4eqt9eQtdFWRRIvMxpNRf4sIegnw=",
+        "narHash": "sha256-7WUCZfmqLAssbDqwg9cUDAXrSoXN79eEEq17qhTNM/Y=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "89c2b2330e733d6cdb5eae7b899326930c2c0648",
+        "rev": "418468ac9527e799809c900eda37cbff999199b6",
         "type": "github"
       },
       "original": {

hosts/dn42-il-gw1/configuration.nix

@@ -46,6 +46,25 @@
     # dn42-router-general-wireguard-key public key:
     # r38qvXqu26x4f6yUGxg44Ji4db/g2HK7RZwG7Boh+38=
 
+    # darkpoint
+    wg0150 = {
+      ips = [
+        "fe80::2574/128"
+      ];
+      postSetup = ''
+      ip addr replace dev wg0150 fe80::2574/128 peer fe80::150/128
+      '';
+      listenPort = 50150;
+      allowedIPsAsRoutes = false;
+      peers = [
+        {
+          allowedIPs = [ "fe80::/10" "fd00::/8" ];
+          endpoint = "fra.darkpoint.xyz:22574";
+          publicKey = "nfoxTtmJdBdxNR3TmfVLG13KA5E+ZtU+uIGCegxrxxw=";
+        }
+      ];
+      privateKeyFile = config.sops.secrets.dn42-router-general-wireguard-key.path;
+    };
     # e1mo
     wg0565 = {
       ips = [
@@ -238,6 +257,13 @@
     ];
 
     wireguardPeers = [
+      {
+        peerName = "peer_0150";
+        remoteAddress = "fe80::150";
+        interfaceName = "wg0150";
+        remoteAsn = "4242420150";
+        localAddress = "fe80::2574";
+      }
       {
         peerName = "peer_0565";
         remoteAddress = "fe80::565";