niksos/hosts/niks/wireguard/default.nix

{
    config,
    pkgs,
    ...
}: {
    networking = {
        firewall = {
            allowedUDPPorts = [ 51820 ];
            checkReversePath = "loose";
        };
        wg-quick = {
            interfaces = {
                ch0 = {
                    address = [ "10.100.0.2/24" ];
                    listenPort = 51820;
                    privateKeyFile = "/home/jacek/.wg/chmura";

                    peers = [
                        {
                            publicKey = "cq4ZqnPM7wVGkoiquDbQLNuqEiPuHa/CLiGFow6buUI=";
                            allowedIPs = [ "0.0.0.0/0" ];
                            endpoint = "hcq082e0b05.sn.mynetname.net:51820";
                        }
                    ];
                };
                mv0 = {
                    address = [ "10.64.197.114/32" "fc00:bbbb:bbbb:bb01::1:c571/128" ];
                    dns = [ "100.64.0.7" ];
                    privateKeyFile = "/home/jacek/.wg/mullvad";
                    peers = [
                        {
                            publicKey = "94qIvXgF0OXZ4IcquoS7AO57OV6JswUFgdONgGiq+jo=";
                            allowedIPs = [ "0.0.0.0/0" "::0/0" ];
                            endpoint = "185.65.135.69:51820";
                        }
                    ];
                };
            };
        };
    };
}