{ ... }: { networking = { firewall = { allowedUDPPorts = [ 5553 # wireguard ]; }; nat.internalInterfaces = [ "wg0" ]; wireguard.interfaces = { wg0 = { ips = [ "10.0.0.1/24" ]; listenPort = 5553; privateKeyFile = "/root/wg-private"; peers = [ { # pixel publicKey = "HS2q+PpPPwxqT1jCD7D4puqr4ZyaXV5TostavlYWBx0="; allowedIPs = [ "10.0.0.2/32" ]; } { # neodymium publicKey = "IFeRvelEilNRLkhWgFKL9HrJ9XYsm+r4yvv23CigETk="; allowedIPs = [ "10.0.0.3/32" ]; } ]; }; }; }; }