From e05271d23eda27d6c0fe548ea16b84bfb50c7bfa Mon Sep 17 00:00:00 2001
From: Maxiem Geldhof <author@maxiemgeldhof.com>
Date: Thu, 4 Dec 2025 22:20:40 +0100
Subject: [PATCH] move to windscribe

---
 keys/mullvad                      | Bin 717 -> 0 bytes
 keys/secrets.nix                  |   2 +-
 keys/wg-scribe                    | Bin 0 -> 755 bytes
 modules/servermodules/arr/arr.nix |  10 ++++++----
 4 files changed, 7 insertions(+), 5 deletions(-)
 delete mode 100644 keys/mullvad
 create mode 100644 keys/wg-scribe

diff --git a/keys/mullvad b/keys/mullvad
deleted file mode 100644
index c2647543b8f523af7b020481299488d1d9a09fb4..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 717
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCT4_VV!xOjmG@@D0=V
zD-Q7WuQG7*axwBWFmTi__BRU3bq+U5GYoUJG%_xU%FJ-eEa&pk&WbcmF3gQA^C~e4
zicIp)a!pG&%TB6t5AX>r@DDQ$Eb-Jf3etBk&PKPb)GsR1B2b~+FTcpk)WE68)HgCY
z%Obea+c~*7z}MKt$2>c<EF{a_G(06IC&Sbz&xFgVG`Pyu*UZ1l!`ve<+#}dOzbGju
zD$&F(EHuR{KQGkR$Hzad$jl;0J00CNUvvKu-*knPRDJV`2#Z7~moh_hvqBG-)J)He
z!U}WOh-|l@@?eiNixO=Y?GkMd4@WMq5>ua2|04ZlN7JGL{~~99)7-R*sB%ZIoIneI
zZKKGl;7I@U9JA!CtZXh_U0nt50At@^ZPQ4@%ABeaBRBnUm%!A_5}ydiDA&y3qF}d3
z6N9uuuN3qAtU#`HOqm;xZCq!^t<e^p5h?LNIQ1rDRj|<$8KJW*tNh<I)M}*t$v!bl
zWZt&VdsfVok<dQ=L`69!%hzp{XwY1PrwlLexxdW3`bW`BGQnq&QBTTMyQ8<K^_#pB
zunxGqv!H3V*0XE*hLuy9)Xy2EICI6{`mp!Tr<k>@7Zy931{b<6m0ggk`*y*S<YPy&
zQg_(7pW@Vi>g02DS=stU$M?LLa(dO=4e$QOh|M{bdrQYRv{vZxZ@IKt>r?K0<kWjn
z%u_%2^n%PgDXS09KeVhrX_9H2)7>C}*J=(X3!~;_>A!g`IWat0{L91_XLR<bq)$y$
z5-dHk@=Sc==VgkX?&rUkUC4ZCw<ut1HCttBQEs=Hq_engOVN~ruNF2d^W_U=l?o?b
l{A2#cWz!c`4>hm)Eql6JLy{k6&eEvj`dr!JyCQ7KE&$mT7(f63

diff --git a/keys/secrets.nix b/keys/secrets.nix
index 631260a..deabb14 100644
--- a/keys/secrets.nix
+++ b/keys/secrets.nix
@@ -14,6 +14,6 @@ in
   "hetzner.priv".publicKeys = macbook ++ selene ++ master ++ ren;
   "wg-ren.priv".publicKeys = macbook++master++ren;
   "ren.priv".publicKeys = master ++ ren;
-  "mullvad".publicKeys = master ++ ren ++ macbook;
+  "wg-scribe".publicKeys = master ++ ren ++ macbook;
   "smbshare".publicKeys = master ++ macbook ++ ren ++ selene;
 }
\ No newline at end of file
diff --git a/keys/wg-scribe b/keys/wg-scribe
new file mode 100644
index 0000000000000000000000000000000000000000..e7fb9d03a25c8bf9ecadaa1c4c56fa25e2babb48
GIT binary patch
literal 755
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCT4_VV!xOjj^+GRVmY
z&^9%TEZ5GqFexp}_Q?n_3&=1`GqQBe(@!-p$TzJtH;SkX3*_=D%}Mcz^m7SLbT2au
zu_((n@-OlA2~RglDX#Pl)Q-$5^vn!2@^>rCO-8q^)GsR1B2d9N*wjVePdhs&*TdK^
zrJ~R?)FaO%+p8!v%+#^aGc>>~peiaWtgxiS#g(fh-y|%p+{r7#Go_>=y~@ShFUv5v
z%rq?2BOutQ&^1ImH7zqB)zQ@`JrvzGUvvKu-*ko4(5T!n!}6psN57oRY}0h7QV&04
zU&G>xFbh+EpX5OEvZ&NRj}i<0%t$V$QVSo0A`Ab>G{Zpmib%hb+#>(1;EJH+D)Y*G
zr!1rNkeuXnH&-90bYCuAU0sFjbi=ZMLbq@uw{qj46i@xq%sg`!v$SAsm((Z|kHXNR
z023!;^WZECzd)|5*Z)bMd$O`@y3u~0b5F`ztfFQ9&Ru<Mj=lS4&*?MjUTuDA`hB%z
zv~#ku?`lo=^iw6w{cn%#IWVJTzFzRD{LgK_GqQ~ttFBJ}zw5#xS-VA2r{BA%N;($k
zCR~c|Y1O#kqg0@^jH_hn@ys=%l^0a*S|=ayRoT{aKI5)gtmenI$(nqA;gc*?!%Ng0
z7#xrBsUO}gmfv5oYK6}7$MfX_q}?sHns1-_y7&F`J69M^$n^_ec&_`Xzw)O08_lBn
z$-RFz=p67jTWKVE<YZg-M|G)}UtQTY)TH$PdcUbYnQ1FacpG<d&!LINEd2%-ywjJ<
z>Rx>GEV%I52c{2sMysCteZQFBd*|@9)beR^9g_@u><TXYbd8!>S)#r8)T%43kNaOM
z30-U4*KykGcBewo5h)$l%XdB|MaNCr<>edabj19{DSkJWjOy(?Zl74Z?e=`i7Ew77
Y-O*JZl(ff>OW1d1rM1+>j}0l;0rF`rm;e9(

literal 0
HcmV?d00001

diff --git a/modules/servermodules/arr/arr.nix b/modules/servermodules/arr/arr.nix
index dcd3f28..00e2f1f 100644
--- a/modules/servermodules/arr/arr.nix
+++ b/modules/servermodules/arr/arr.nix
@@ -15,12 +15,14 @@ in
     ];
   };
 
-  age.secrets.mullvad = {
-    file = ../../../keys/mullvad;
-    path = "/etc/wireguard/mullvad.conf";
+  age.secrets.wg-scribe = {
+    file = ../../../keys/wg-scribe;
+    path = "/etc/wireguard/wg-scribe.conf";
   };
 
-  networking.firewall.trustedInterfaces = [ "wg-selene" ];
+  networking.firewall.trustedInterfaces = [ "wg-selene" "wg-scribe" ];
+  networking.firewall.allowedUDPPorts = [ 10632 ];
+  networking.firewall.checkReversePath = false;
   services.prowlarr.enable = true;
 
   services.deluge = {