Setup Wireguard configuration

hosts/cyper-proxy/configuration.nix

@@ -37,9 +37,37 @@
       "178.254.16.141"
     ];
 
+    wireguard.interfaces.wg0 = {
+      ips = [ "10.10.0.1/24" ];
+      listenPort = 51820;
+      peers = [
+        {
+          publicKey = "EvML4de3CReNW8aF+lJAsPZ+p6FICOyjCsAZJBwIwX8=";
+          allowedIPs = [ "10.10.0.2/32" ];
+        }
+        {
+          publicKey = "WkY45tGnNZQuJTf1MPN6I92spxHts/kpzXRSZE9se2c=";
+          allowedIPs = [ "10.10.0.3/32" ];
+        }
+        {
+          publicKey = "oAstNd7Wxpj2PqSyS87q+8y8WtaLK7hZ5Ytfncml9EM=";
+          allowedIPs = [ "10.10.0.40/32" ];
+        }
+        {
+          publicKey = "GrFH3I5QqjRij7Jl+eOL6Ou6zK6MtH5/kAsA5AmGckM=";
+          allowedIPs = [ "10.10.0.30/32" ];
+        }
+        {
+          publicKey = "IddGAijZVCVxGj/aMasjfroIy9r8Owar4MO9xfvNNBY=";
+          allowedIPs = [ "10.10.0.31/32" ];
+        }
+      ];
+    };
+
     firewall.allowedTCPPorts = [
       80
       443
+      51820
     ];
 
     hosts = {

hosts/cyper-proxy/hardware-configuration.nix

@@ -16,6 +16,7 @@
       ];
       kernelModules = [ ];
     };
+    kernel.sysctl."net.ipv4.ip_forward" = 1;
     kernelModules = [ ];
     extraModulePackages = [ ];
   };
@@ -30,10 +31,9 @@
         "mode=755"
       ];
     };
+
+    "/nix".neededForBoot = true;
+    "/persist".neededForBoot = true;
   };
-
-  fileSystems."/nix".neededForBoot = true;
-  fileSystems."/persist".neededForBoot = true;
-
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
 }