diff --git a/config/xmonad/xmonad.hs b/config/xmonad/xmonad.hs
index 86d46d03..cf7ff17d 100644
--- a/config/xmonad/xmonad.hs
+++ b/config/xmonad/xmonad.hs
@@ -307,7 +307,6 @@ myStartupHook = do
   spawnOnce "flameshot"
   spawn "picom"
   spawn "trayer --edge bottom --align right --iconspacing 5 --height 30 --widthtype request --alpha 0 --transparent true --tint 'black'"
-
 ------------------------------------------------------------------------
 -- Now run xmonad with all the defaults we set up.
 
diff --git a/hosts/sakotop/configuration.nix b/hosts/sakotop/configuration.nix
index 3facc66a..66586d38 100644
--- a/hosts/sakotop/configuration.nix
+++ b/hosts/sakotop/configuration.nix
@@ -18,6 +18,7 @@
 
   modules = {
     desktop = {
+      wireguard.enable = true;
       kitty.enable = true;
       dwm.enable = false;
       xmonad.enable = true;
diff --git a/modules/desktop/default.nix b/modules/desktop/default.nix
index 824dd4b6..2b5226e4 100644
--- a/modules/desktop/default.nix
+++ b/modules/desktop/default.nix
@@ -21,5 +21,7 @@
     ./picom
     # boot
     ./plymouth
+    # vpn
+    ./wireguard
   ];
 }
diff --git a/modules/desktop/wireguard/default.nix b/modules/desktop/wireguard/default.nix
new file mode 100644
index 00000000..af4b61b9
--- /dev/null
+++ b/modules/desktop/wireguard/default.nix
@@ -0,0 +1,20 @@
+{
+  outputs,
+  options,
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+with lib; let
+  cfg = config.modules.desktop.wireguard;
+in {
+  options.modules.desktop.wireguard = {
+    enable = mkEnableOption false;
+  };
+
+  config = mkIf cfg.enable {
+    # todo declaritivly setting it up
+    networking.wireguard.enable = true;
+  };
+}
diff --git a/modules/desktop/wireguard/default.nix~ b/modules/desktop/wireguard/default.nix~
new file mode 100644
index 00000000..e69de29b