{
  config,
  pkgs,
  ...
}: {
  environment.systemPackages = with pkgs; [
    wireguard-tools
  ];

  networking.wg-quick.interfaces = {
    freyanet = {
      address = ["10.2.0.10/32" "fd:cafe:dead:bee::10/128" "fe80::10/128"];
      dns = ["10.3.0.138"];
      privateKeyFile = config.sops.secrets.freyanetWg.path;
      autostart = false;

      peers = [
        {
          publicKey = "x0ykwakpYCvI/pG+nR83lNUyeOE9m54thnX3bvZ+FUk=";
          allowedIPs = ["10.0.0.0/14" "fd:cafe::/32"];
          endpoint = "cid.freya.cat:3000";
          persistentKeepalive = 25;
        }
      ];
    };
  };
}