let
  vars = import ./secrets.nix;
in
{
  networking.wireguard = {
    enable = true;
    interfaces = {
      wgbackup = {
        ips = [
          "10.246.2.3/24"
        ];
        peers = [
          {
            allowedIPs = [
              "10.246.2.2/32"
            ];
            endpoint = "unraid.mousesama.net:51820";
            publicKey = vars.peerPublicKey;
            presharedKey = vars.presharedKey;
            persistentKeepalive = 25;
          }
        ];
        privateKey = vars.privateKey;
      };
    };
  };
}