{
  flake,
  config,
  pkgs,
  lib,
  ...
}: {
  networking.hostName = "stroopwafel";
  networking.networkmanager.wifi.backend = "wpa_supplicant";

  age.secrets.wg-private-key.file = "${flake.self}/secrets/wg-private-stroopwafel.age";

  pub-solar.wireguard.private = {
    ownIPs = [
      "10.13.12.8/32"
      "fd00:b12f:acab:1312:acab:8::/96"
    ];
    privateKeyFile = config.age.secrets.wg-private-key.path;
  };

  age.secrets.wg-public-key.file = "${flake.self}/secrets/wg-public-stroopwafel.age";

  pub-solar.wireguard.public = {
    ownIPs = [
      "10.68.3.133/32"
      "fc00:bbbb:bbbb:bb01::5:384/128"
    ];
    privateKeyFile = config.age.secrets.wg-public-key.path;
    peer = {
      publicKey = "5FZW+fNA2iVBSY99HFl+KjGc9AFVNE+UFAedLNhu8lc=";
      endpoint = "146.70.134.2:3565";
    };
  };
}