From 23a5f1f80dbc198c9a81ed0bea13f6be3b4b3689 Mon Sep 17 00:00:00 2001
From: Rodrigo Gryzinski <contact@rogryza.me>
Date: Sat, 9 Sep 2023 16:41:10 +0100
Subject: [PATCH] nixos/wireguard: add wireguard to default kernel modules

Previously the module was only dynamically loaded on service startup,
this is needed in case security.lockKernelModules is enabled.
---
 nixos/modules/services/networking/wireguard.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/services/networking/wireguard.nix b/nixos/modules/services/networking/wireguard.nix
index d4099be12a27..d36be87daf60 100644
--- a/nixos/modules/services/networking/wireguard.nix
+++ b/nixos/modules/services/networking/wireguard.nix
@@ -586,6 +586,7 @@ in
         }) all_peers;
 
     boot.extraModulePackages = optional (versionOlder kernel.kernel.version "5.6") kernel.wireguard;
+    boot.kernelModules = [ "wireguard" ];
     environment.systemPackages = [ pkgs.wireguard-tools ];
 
     systemd.services =