diff --git a/nixos/machines/orbi/network-wireguard.nix b/nixos/machines/orbi/network-wireguard.nix
index 696ee6a..f26966e 100644
--- a/nixos/machines/orbi/network-wireguard.nix
+++ b/nixos/machines/orbi/network-wireguard.nix
@@ -31,16 +31,6 @@ in
           publicKey = publicKey "chungus";
           allowedIPs = [ "10.100.0.2/32" ];
         }
-        {
-          # iphone
-          publicKey = "XPVzH+wBLsqukTHHjngkGJhYN0nRdQ7esadiimMJQnI=";
-          allowedIPs = [ "10.100.0.4/32" ];
-        }
-        {
-          # tina
-          publicKey = "RZsuQfWfAQLMm45ZiuNLBwcpL+GEbPYTRTrASFzMCFQ=";
-          allowedIPs = [ "10.100.0.5/32" ];
-        }
         {
           # cream
           publicKey = publicKey "cream";
@@ -51,15 +41,21 @@ in
           publicKey = publicKey "cherry";
           allowedIPs = [ "10.100.0.7/32" ];
         }
+        # mobil devices start with 100
         {
-          # ipad
-          publicKey = "E8TJTPQT0jK9vzDrwqX4fIGQtM640gc6qALVTZgmfRo=";
-          allowedIPs = [ "10.100.0.8/32" ];
+          # iphone palo
+          publicKey = "ICeZLWYzF+nTffMV0+8yfW1WJsUQNhNbKQ4rRbn5hDs=";
+          allowedIPs = [ "10.100.0.101/32" ];
         }
         {
-          # ipad tina
-          publicKey = "aOlfGT2c/4v7U7faLXyCyiCHe8iSAOedblKgbJONxnM=";
-          allowedIPs = [ "10.100.0.9/32" ];
+          # ipad palo
+          publicKey = "wN81/4K2d5tcxqrxnjOpKw9YpAkPdp0/8cCN1B7icVo=";
+          allowedIPs = [ "10.100.0.102/32" ];
+        }
+        {
+          # iphone tina
+          publicKey = "8f8fYGymH3Tq8d14B2+ijMiHwocEbUIXSZji3U29IhA=";
+          allowedIPs = [ "10.100.0.103/32" ];
         }
       ];
     };
diff --git a/scripts/.gitignore b/scripts/.gitignore
new file mode 100644
index 0000000..287d1f8
--- /dev/null
+++ b/scripts/.gitignore
@@ -0,0 +1 @@
+client.conf
\ No newline at end of file
diff --git a/scripts/wireguard-client.sh b/scripts/wireguard-client.sh
index a73a643..ea05836 100644
--- a/scripts/wireguard-client.sh
+++ b/scripts/wireguard-client.sh
@@ -2,8 +2,8 @@
 #
 # Create a new wireguard client
 
-client_name="ipad tina"
-client_ip=10.100.0.9
+client_name="iphone tina"
+client_ip=10.100.0.103
 private_key=$(wg genkey)
 public_key=$(echo "$private_key" | wg pubkey)
 
@@ -15,7 +15,7 @@ ListenPort = 51820
 PrivateKey = ${private_key}
 
 [Peer]
-PublicKey = uWR93xJe5oEbX3DsAYpOS9CuSg1VmXEQxJzdlJpe3DU=
+PublicKey = txECSpa5HeIWgRtcZNxBUzkdN72rsA2w6Is6gIp0Tlc=
 Endpoint = ingolf-wagner.de:51820
 AllowedIPs = 10.100.0.1/24
 EOF