diff --git a/home-manager/.authorized-keys/dingleberry b/home-manager/.authorized-keys/dingleberry
new file mode 100644
index 0000000..e6fecb4
--- /dev/null
+++ b/home-manager/.authorized-keys/dingleberry
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKxA6m6fD1jch/HwkWBaaYyr0HPttzM0i1D+V2MtMmFK becky@dingleberry
diff --git a/home-manager/.authorized-keys/lcech-mac-veracode b/home-manager/.authorized-keys/lcech-mac-veracode
new file mode 100644
index 0000000..79fd404
--- /dev/null
+++ b/home-manager/.authorized-keys/lcech-mac-veracode
@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKFOQaA7023StG5vSl0txUbAXmPdsIFeWHLDHXlT5yZp lcech@lcech-mac-veracode
diff --git a/home-manager/lcech-mac-veracode.nix b/home-manager/lcech-mac-veracode.nix
index 437105d..13fe4aa 100644
--- a/home-manager/lcech-mac-veracode.nix
+++ b/home-manager/lcech-mac-veracode.nix
@@ -53,6 +53,26 @@ in
       '';
     };
 
+    "${homedir}/.ssh/config" = {
+      text = ''
+        Include /Users/lcech/.colima/ssh_config
+
+        host git.c3c.cz
+                Port 5522
+
+        host dingleberry
+                User becky
+                Hostname 10.196.196.5
+                IdentityFile ~/.ssh/id_ed25519_access
+      '';
+    };
+
+    "${homedir}/.ssh/authorized_keys" = {
+      text = ''
+        ${builtins.readFile ./.authorized-keys/dingleberry}
+      '';
+    };
+
     "${homedir}/.hammerspoon/hmSpoons/C3CWorkspace.spoon" = {
       source = ./hammerspoon/C3CWorkspace.spoon;
       recursive = true;
@@ -158,6 +178,27 @@ in
 
     shellAliases = {
       hammerspoon-config = "open -a ${pkgs.hammerspoon}/Applications/Hammerspoon.app/Contents/MacOS/Hammerspoon";
+      get-key = "${pkgs.writeShellScript "get-key" ''
+        scp dingleberry:/self/hintihint/keys/sum.key ${homedir}/hw.key
+        read -p "waiting for confirmation to delete the key"
+        rm ${homedir}/hw.key
+      ''}";
+      wg-home = "${pkgs.writeShellScript "wg-home" ''
+        WG=$(sudo wg show)
+        if [[ "$WG" != "" ]]; then
+          if [[ $(echo "$WG" | grep endpoint | cut -c13-26) == "10.125.248.248" ]]; then
+            sudo wg-quick down /etc/wireguard/home.conf
+          else
+            sudo wg-quick down /etc/wireguard/home-remote.conf
+          fi
+        fi
+
+        if [[ $(dig +short myip.opendns.com @resolver1.opendns.com) == "185.142.210.84" ]]; then
+          sudo wg-quick up /etc/wireguard/home.conf
+        else
+          sudo wg-quick up /etc/wireguard/home-remote.conf
+        fi
+      ''}";
     };
 
     initContent = ''