{
  pkgs,
  service_configs,
  eth_interface,
  config,
  ...
}:
{
  # network namespace that is proxied through mullvad
  vpnNamespaces.wg = {
    enable = true;
    wireguardConfigFile = config.age.secrets.wg0-conf.path;
    accessibleFrom = [
      # "192.168.0.0/24"
    ];
  };

}