{ config, lib, ... }:
{
  systemd.network = {
    netdevs."90-evilvpn" = {
      enable = lib.mkDefault false;
      netdevConfig = {
        Kind = "wireguard";
        Name = "wg0";
      };

      wireguardConfig = {
        PrivateKeyFile = "/etc/wireguard/${config.networking.hostName}.key";
        RouteTable = "main";
      };

      wireguardPeers = [
        {
          AllowedIPs = [ "10.6.6.0/24" ];
          Endpoint = "www.eviltransgenders.club:51820";
          PersistentKeepalive = 25;
          PublicKey = "ChnzJG0HJcgk3OhgTzoPZ9EOyhuCH1EAknaQ9VF7N0I=";
        }
      ];
    };

    networks."90-evilvpn" = {
      dns = [ "10.6.6.2" ];
      matchConfig.Name = "wg0";
    };
  };
}