diff --git a/machines/porthos/services.nix b/machines/porthos/services.nix
index 870a56c..88042e4 100644
--- a/machines/porthos/services.nix
+++ b/machines/porthos/services.nix
@@ -73,6 +73,10 @@ in
       username = "Ambroisie";
       password = my.secrets.transmission.password;
     };
+    # Simple, in-kernel VPN
+    wireguard = {
+      enable = true;
+    };
   };
 
   programs.gnupg.agent = {