From de3dd664e27fb3c986373561c0ed7ef890903409 Mon Sep 17 00:00:00 2001
From: Bryan Ramos <bryan@ramos.codes>
Date: Sun, 12 Apr 2026 20:52:04 -0400
Subject: [PATCH] fix(server): order dnsmasq after wireguard interface

---
 system/machines/server/system.nix | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/system/machines/server/system.nix b/system/machines/server/system.nix
index b843f7e..1d4065c 100644
--- a/system/machines/server/system.nix
+++ b/system/machines/server/system.nix
@@ -21,7 +21,12 @@
     webdav.enable = false;
     wireguard = {
       enable = true;
-      peers = [ ];
+      peers = [
+        {
+          publicKey = "HRFsVXn3jeqKQLQIl0cB6KC/qia7M1gQf2lqG5HDxF8=";
+          allowedIPs = [ "10.8.0.2/32" ];
+        }
+      ];
     };
     # bitcoin = {
     #   enable = true;
@@ -189,6 +194,11 @@
     };
   };
 
+  systemd.services.dnsmasq = {
+    after = [ "wireguard-wg0.service" ];
+    wants = [ "wireguard-wg0.service" ];
+  };
+
   services.fail2ban = {
     enable = true;
     maxretry = 5;