{...}: {
  networking.wireguard.interfaces = {
    biscuit-default = {
      ips = ["10.2.0.2/32"];
      listenPort = 51820;
      privateKeyFile = "/home/biscuit/Wireguard/secret";
      dns = ["10.2.0.1"];
      peers = [
        {
          publicKey = "KkUoHrIzkuQ4msZulqCFyRC1Gqcx8oMgbDFRn8wW1X8=";
          allowedIPs = ["0.0.0.0/0"];
          endpoint = "95.173.221.65:51820";
          persistentKeepAlive = 25;
        }
      ];
    };
  };
}