nix-config/hosts/m3-nix/services/wireguard.nix

{config, ...}: {
  networking.wg-quick.interfaces = {
    wg0 = {
      configFile = config.age.secrets.wg-key.path;
      autostart = false;
    };
  };
}