flakeup and wireguard

Author: neonvoidx

flake.lock

@@ -24,6 +24,7 @@
       # Security
       den.aspects.sops
       den.aspects.pcscd
+      den.aspects.wireguard
       # den.aspects.ly
       den.aspects.noctalia-greeter
       den.aspects.polkit

modules/hosts/void/default.nix

@@ -0,0 +1,21 @@
+{ den, ... }:
+{
+  den.aspects.wireguard.nixos =
+    { pkgs, ... }:
+    {
+      # Ensure the wireguard kernel module is available. No interface is
+      # auto-configured: you bring it up/tear it down on the fly with
+      # `wg-quick up <config>` / `wg-quick down <config>`, pointing at any
+      # Proton/WireGuard .conf you like. It never starts automatically.
+      boot.kernelModules = [ "wireguard" ];
+
+      environment.systemPackages = with pkgs; [
+        wireguard-tools
+      ];
+
+      environment.shellAliases = {
+        wg-up = "sudo wg-quick up";
+        wg-down = "sudo wg-quick down";
+      };
+    };
+}

modules/security/wireguard.nix

@@ -53,6 +53,7 @@
         via
         wget
         whois
+        wireguard-tools
         xrandr
         xwayland
         yubico-pam