#NixOS is my "golf" -- I love it and I hate it at the same time.

Today's milestone: I am finally connected to #ProtonVPN / #Wireguard.

Here's how I had to do it:

1. Follow the steps at [How to Manually Configure Wireguard on Linux](https://protonvpn.com/support/wireguard-manual-linux/). You'll have to create a directory at `/etc/wireguard` to store the downloaded *.conf.

2. After running `sudo wg-quick up {interface}` (leave off the .conf from your file name), run `sudo wg show` - you'll need some of this info in a moment.

3. Also run `sudo cat /etc/wireguard/*.conf` and copy your private key.

4. Open VPN Settings and configure the new connection.

5. Select 'connect automatically'

6. Select the Wireguard tab

7. Paste in your private key from step 3.

8. Update the listening port (see output of step 2)

9. Update the fwmark (see output of step 2)

10. Set the MTU to1420.

11. Click the gear to configure the peer.

12. Update the Endpoint (see output of step 2)

13. Update the Allowed IP Addresses, and click Apply.

14. Click Apply.

15. You might need to then 'turn it on' in the system tray.

16. Go to https://ip.me to make sure it's not showing you your own location

Hope this helps someone out there, this took me WAY too long to figure out. None of the guides I read quite covered it all. Importing zips didn't work. Importing the downloaded .conf didn't work. This works.

Next step is to ensure all this happens automatically from the configuration.nix or imports (suggestions more than welcome!).