nix/hosts/marvin/networking.nix

{ lib, ...}: {
  networking = {
    hostName = "marvin";
    enableIPv6 = true;
    useDHCP = lib.mkDefault true;
    interfaces = {
      enp42s0.useDHCP = lib.mkDefault true;
      wlp41s0.useDHCP = lib.mkDefault true;
    };
    networkmanager = {
      enable = true;
    };
    wireless.enable = false;
    wireguard = {
      enable = true;
      interfaces = {
        # Internet Wireguard
        wg0 = {
          ips = [ "10.100.0.2/32" ];
          privateKeyFile = "/run/agenix/external-wg-priv-key";
          peers = [
            {
              publicKey = "e6kp9sca4XIzncKa9GEQwyOnMjje299Xg9ZdgXWMwHg=";
              allowedIPs = [ "10.100.0.1/32"];
              endpoint = "65.108.0.219:420";
              persistentKeepalive = 10;
            }
          ];
        };
        # DN42 Wireguard
        # wg42 = {
        #   allowedIPsAsRoutes = true;
        #   ips = [ "172.20.43.110/32" ];
        #   peers = [
        #     {
        #       allowedIPs = [ "172.20.0.0/14" ];
        #       dynamicEndpointRefreshSeconds = 10;
        #       endpoint = "65.108.0.219:488";
        #       persistentKeepalive = 25;
        #       publicKey = "e6kp9sca4XIzncKa9GEQwyOnMjje299Xg9ZdgXWMwHg=";
        #     }
        #   ];
        # };
      };
    };
  };
}