add crypto

modules/nixos/services/crypto/default.nix

@@ -0,0 +1,31 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+with lib;
+with lib.custom; let
+  cfg = config.services.crypto;
+in {
+  options.services.crypto = with types; {
+    enable = mkBoolOpt false "Enable Monero";
+  };
+  config = mkIf cfg.enable {
+    services.wg-container.enable = true;
+
+    systemd.services.monero.vpnConfinement = {
+      enable = true;
+      vpnNamespace = "wg";
+    };
+
+    services.monero = {
+      enable = true;
+      mining.enable = false;
+      rpc = {address = "192.168.15.1";};
+      extraConfig = ''
+        confirm-external-bind=1
+      '';
+    };
+  };
+}