yggdrasil possibly (doesn't play nice with mullvad)

configuration.nix

@@ -261,6 +261,16 @@ in
   KERNEL=="hidraw*", SUBSYSTEM=="hidraw", MODE="0660", GROUP="users", TAG+="uaccess", TAG+="udev-acl"
   '';
 
+  services.yggdrasil = {
+    enable = true;
+    # probably not optimal, i didn't check that they were close to me
+    settings.Peers = [
+      "tls://ygg.jjolly.dev:3443"
+      "quic://129.80.167.244:23165"
+      "quic://mn.us.ygg.triplebit.org:443"
+    ];
+  };
+
   # This value determines the NixOS release from which the default
   # settings for stateful data, like file locations and database versions
   # on your system were taken. It‘s perfectly fine and recommended to leave

home.nix

@@ -317,7 +317,7 @@ in
       core.autocrlf = false;
       init.defaultBranch = "main";
       user.signingkey = "8CD6E1438A00F55363157881E333EC1335FFCCDB";
-      commit.gpgsign = true;
+      commit.gpgsign = darwin;
     };
   };