split up wireguard stuff

services/wg.nix

@@ -0,0 +1,12 @@
+{ pkgs, service_configs, ... }:
+{
+
+  # network namespace that is proxied through mullvad
+  vpnNamespaces.wg = {
+    enable = true;
+    wireguardConfigFile = ../secrets/wg0.conf;
+    accessibleFrom = [
+      "192.168.0.0/24"
+    ];
+  };
+}