nixy/wireguard: add proton vpn free tier

nixy/configuration.nix

@@ -31,6 +31,10 @@
         sopsFile = ../common/secrets/wg_preshared.yaml;
       };
 
+      "wg_privkey_proton" = {
+        sopsFile = ./secrets/wg_privkey_proton.yaml;
+      };
+
       "borgbase_enc_key" = {
         sopsFile = ./secrets/borgbase_enc_key.yaml;
         owner = config.users.users.akill.name;
@@ -144,6 +148,19 @@
           }
         ];
       };
+
+      proton = {
+        ips = [ "10.2.0.2/32" ];
+        privateKeyFile = config.sops.secrets."wg_privkey_proton".path;
+        peers = [
+          {
+            publicKey = builtins.readFile ../common/wg_pubkey_proton;
+            allowedIPs = [ "10.2.0.0/24" ];
+            endpoint = "109.236.81.166:51820";
+            persistentKeepalive = 25;
+          }
+        ];
+      };
     };
   };