{
  pkgs,
  config,
  inputs,
  ...
}:
{
  imports = [
    inputs.vpn-confinement.nixosModules.default
  ];

  # network namespace that is proxied through mullvad
  vpnNamespaces.wg = {
    enable = true;
    wireguardConfigFile = config.age.secrets.wg0-conf.path;
    accessibleFrom = [
      # "192.168.0.0/24"
    ];
  };
}