Move wireguard to thinknix

ThinkNix/configuration.nix

@@ -19,6 +19,7 @@
     # ./services/kopia.nix
     ./services/nginx-proxy-manager.nix
     ./services/portainer.nix
+    ./services/wireguard.nix
   ];
 
   # Bootloader.

ThinkNix/services/wireguard.nix

@@ -0,0 +1,36 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}: {
+  virtualisation.oci-containers.containers.wireguard = {
+    image = "linuxserver/wireguard:latest";
+    autoStart = true;
+
+    dependsOn = [
+      # "pihole"
+    ];
+
+    ports = [
+      "51820:51820"
+    ];
+
+    volumes = [
+      "wireguard_vps_config:/config"
+      "wireguard_vps_modules:/lib/modules"
+    ];
+
+    environment = {
+      PUID = "1000";
+      PGID = "1000";
+      TZ = "Europe/Berlin";
+    };
+
+    extraOptions = [
+      "--cap-add=NET_ADMIN"
+      "--cap-add=SYS_MODULE"
+      # "--net=behind-nginx"
+    ];
+  };
+}