diff --git a/configuration.nix b/configuration.nix
index baa9f35..06ddd82 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -56,7 +56,7 @@
       # This allows the wireguard server to route your traffic to the internet and hence be like a VPN
       # For this to work you have to set the dnsserver IP of your router (or dnsserver of choice) in your clients
       postSetup = ''
-        ${pkgs.iptables}/bin/iptables -t nat -I POSTROUTING -s 10.100.0.0/24 -o eno4 -j MASQUERADE
+        ${pkgs.iptables}/bin/iptables -t nat -A POSTROUTING -s 10.100.0.0/24 -o eno4 -j MASQUERADE
       '';
 
       # This undoes the above command
@@ -101,6 +101,7 @@
   virtualisation.podman.defaultNetwork.settings.dns_enabled = true;
 
   environment.systemPackages = [
+    pkgs.git
     pkgs.bash
     pkgs.wget
     pkgs.curl
diff --git a/services/gitea.nix b/services/gitea.nix
index 0653a15..39b27b7 100755
--- a/services/gitea.nix
+++ b/services/gitea.nix
@@ -31,8 +31,8 @@
       passwordFile = "/run/keys/gitea-dbpassword"; # config.sops.secrets."postgres/gitea_dbpass".path
     };
     settings.server = {
-      DOMAIN = "git.fallingsky.love";
-      ROOT_URL = "https://git.fallingsky.love/";
+      DOMAIN = "git.skymath.duckdns.org";
+      ROOT_URL = "https://git.skymath.duckdns.org/";
       HTTP_PORT = 3001;
     };
   };
diff --git a/wg-publickey b/wg-publickey
new file mode 100644
index 0000000..99baf47
--- /dev/null
+++ b/wg-publickey
@@ -0,0 +1 @@
+M9QXz6kgLejkhi2mcxxdWhTmGWkbhgblQnA3KfyHqlo=