{ pkgs, service_configs, ... }:
{
  # network namespace that is proxied through mullvad
  vpnNamespaces.wg = {
    enable = true;
    wireguardConfigFile = ../secrets/wg0.conf;
    accessibleFrom = [
      # "192.168.0.0/24"
    ];
  };
}