{ config, pkgs, ...}:
{

  age.secrets.wg0-key = {
    file = ../secrets/wg0-key.age;
  };

  networking.wg-quick.interfaces = {
    wg0 = {
      address = ["10.0.0.18/32"];
      privateKeyFile = config.age.secrets.wg0-key.path;
      peers = [
        {
          endpoint = "202.61.203.128:51820";
          publicKey = "dGeLAqZD81XYcZQBJ5SELiUGh7hD//G+o1rahSpxY0s=";
          allowedIPs = [ "10.0.0.1/32" "10.0.0.6/32" "10.0.0.19/32" "10.0.0.4/32"];
	  persistentKeepalive = 25;
        }
      ];
    };
  };
}