nix-config/machines/aramis/services.nix

{ ... }:
{
  config.my.services = {
    wireguard = {
      enable = true;
    };
  };
}