{ pkgs, ... }:

{
  programs.throne = {
    enable = true;
    tunMode.enable = true;
  };

  programs.amnezia-vpn.enable = true;

  networking.wireguard.enable = true;

  boot.kernelModules = [ "wireguard" ];

  environment.systemPackages = with pkgs; [
    wireguard-tools
  ];

  systemd.services.wireguard-client = {
    description = "WireGuard client tunnel (wg)";
    after = [ "network-online.target" ];
    wants = [ "network-online.target" ];
    wantedBy = [ "multi-user.target" ];
    serviceConfig = {
      Type = "oneshot";
      RemainAfterExit = true;
      ExecStart = "${pkgs.wireguard-tools}/bin/wg-quick up wg";
      ExecStop = "${pkgs.wireguard-tools}/bin/wg-quick down wg";
    };
  };
}