diff --git a/logins/admins.nix b/logins/admins.nix
index db5c6b5d..760a920a 100644
--- a/logins/admins.nix
+++ b/logins/admins.nix
@@ -37,6 +37,12 @@
     };
 
     secretEncryptionKeys = sshPubKeys;
+    wireguardDevices = [
+      { # judy
+        publicKey = "I+gN7v1VXkAGoSir6L8aebtLbguvy5nAx1QVDTzdckk=";
+        allowedIPs = [ "10.7.6.202/32" "fd00:fae:fae:fae:fae:202::/96" ];
+      }
+    ];
   };
 
   teutat3s = {