{ config, pkgs, ... }:

{
  networking = {
    hostName = "pad"; # Define your hostname.
    
    # Enables wireless support via wpa_supplicant.
    # wireless.enable = true;
    
    # Configure network proxy if necessary
    # proxy.default = "http://user:password@proxy:port/";
    # proxy.noProxy = "127.0.0.1,localhost,internal.domain";

    # Enable networking
    networkmanager.enable = true;

    wireguard = {
      enable = true;

      interfaces = {
        rousi = {
          ips = [
            "10.0.0.4/24"
          ];
          listenPort = 51820;
          privateKeyFile = "/home/aethrvmn/.creds/rousikey";

          peers = [
            {
              allowedIPs = [ 
                "192.168.10.0/24" 
                "172.16.0.0/24"
              ];
              publicKey = "LEeO3Qy6c3W0qoR1xFhl7Fx29Oppq8tKE72HPoA831I=";
              endpoint = "vpn.valatsos.gr:51820";
              persistentKeepalive = 25;
            }
          ];
        };
      };
    };

    # Open ports in the firewall.
    firewall = {
      ## 1313 is for HUGO
      ## 2234 is nicotine
      ## 53317 is localsend
      allowedTCPPorts = [ 1313 2234 53317 ];
      ## 51820 is wg 
      allowedUDPPorts = [ 51820 ];
    };
    # Or disable the firewall altogether.
    # firewall.enable = false;
  };
}