Make private hetzner network /24 instead of /16

It seems not possible (or at least easy) to connect other hosts to the
hetzner hosts via wireguard within 10.83.0.0/16 when the subnet
controlled by hetzner owns that whole range. Reducing it so that e.g.
10.83.1.0/24 can be a wireguard network

main.tf

@@ -14,7 +14,7 @@ terraform {
     }
     hcloud = {
       source  = "hetznercloud/hcloud"
-      version = "1.45.0"
+      version = "1.49.1"
     }
     nomad = {
       source  = "hashicorp/nomad"
@@ -77,13 +77,13 @@ data "cloudflare_zone" "datasektionen" {
 
 resource "hcloud_network" "cluster" {
   name     = "nomad-cluster-network"
-  ip_range = "10.83.0.0/16"
+  ip_range = "10.83.0.0/24"
 }
 
 resource "hcloud_network_subnet" "cluster-main" {
   network_id   = hcloud_network.cluster.id
   type         = "cloud"
-  ip_range     = "10.83.0.0/16"
+  ip_range     = "10.83.0.0/24"
   network_zone = "eu-central"
 }
 

modules/addresses.nix

@@ -32,6 +32,6 @@ in
     ];
 
     # Must be kept in sync with `hcloud_network_subnet.cluster-main.ip_range` in tf
-    subnet = "10.83.0.0/16";
+    subnet = "10.83.0.0/24";
   };
 }