wg-quick.nix

{ stdenv, pkgs, lib, ... }:
{
  # IPv6 is supported, but this example is for IPv4
  networking.wg-quick.interfaces = {
    wg0 = {
      address = [ "10.7.0.1/32" ];
      peers = [
        {
            publicKey = "ABCABCABC";
            allowedIPs = [ "0.0.0.0/0" ];
            endpoint = "100.0.0.1:51820";
        }
      ];
      privateKeyFile = "/private/wireguard-private-key";
    };
  };
}