{ config, pkgs, ... }:

{
  boot.extraModulePackages = with config.boot.kernelPackages; [ wireguard ];
  environment.systemPackages = [ pkgs.wireguard ];
  networking.wireguard.enable = true;
  networking.wireguard.interfaces = {
    wg0 = {
      ips = [ "10.0.69.2/32" ];
      privateKeyFile = "/var/lib/wireguard/priv";

      peers = [
        { # helix - server
          publicKey = "{c1J4p63rD3IlszugMZiki7UBV3YmDdqa3DU4UejXzAI=}";
          allowedIPs = [ "10.0.69.1/24" ];
          endpoint = "sealight.xyz:60990";
          persistentKeepalive = 25;
        } ];
    };
  };
}