nix-configurations/hosts/m3-nix/services/wireguard.nix

{ config, ... }: {
  networking.wg-quick.interfaces = {
    wg0 = {
      configFile = config.age.secrets.wg-key.path;
      autostart = false;
    };
  };
}