}
        { #NixOS desktop
          publicKey = "CS9YFC+ZMBHt9h/N7p3bpNiOoS0AnZnBXasvogfyIEg=";
          allowedIPs = [ "10.100.1.2/32" ];

{ config, pkgs, ... }:
{
  age.secrets."wireguard_desktop/private.key".file = ../../secrets/wireguard_desktop/private.key;
  networking.wireguard.interfaces = {
    wg0 = {
      ips = ["10.100.1.2/24"];
      listenPort = 51820;
      privateKeyFile = config.age.secrets."wireguard_desktop/private.key".path;
      peers = [
        {
          publicKey = "OdVMF/vEnyFYAOYU8Rfl+0ubW14TVfZUU5HGUV8sGzY=";
          allowedIPs = ["10.100.0.0/16"];
          endpoint = "internal.arvinderd.com:51820";
          persistentKeepalive = 25;
        }
      ];
    };
  };
}

    ./wireguard.nix

    wireguard

  desktop = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINEsyr9uX4OFH3vsoiIxeW5D9ZEam2tbg/mQRZ6Ov2aL"; 

  "wireguard_desktop/private.key".publicKeys = [desktop];