diff --git a/newinfra/nix/hive.nix b/newinfra/nix/hive.nix
index 2462023..b78ad19 100644
--- a/newinfra/nix/hive.nix
+++ b/newinfra/nix/hive.nix
@@ -116,6 +116,7 @@
     imports = [
       (modulesPath + "/profiles/qemu-guest.nix")
       ./modules/contabo
+      ./modules/wg-mesh
       ./modules/ingress
       ./modules/minio
       ./modules/widetom
@@ -124,7 +125,7 @@
     age.secrets.docker_registry_password.file = ./secrets/docker_registry_password.age;
 
     networking.hostName = name;
-    deployment.tags = [ "ingress" "eu" "apps" ];
+    deployment.tags = [ "ingress" "eu" "apps" "wg" ];
     system.stateVersion = "23.11";
 
     # TODO: move
@@ -151,12 +152,13 @@
     imports = [
       (modulesPath + "/profiles/qemu-guest.nix")
       ./modules/contabo
+      ./modules/wg-mesh
       ./modules/ingress
       ./modules/minio
     ];
 
     networking.hostName = name;
-    deployment.tags = [ "ingress" "eu" "apps" ];
+    deployment.tags = [ "ingress" "eu" "apps" "wg" ];
     system.stateVersion = "23.11";
 
     # TODO: move
diff --git a/newinfra/nix/modules/wg-mesh/default.nix b/newinfra/nix/modules/wg-mesh/default.nix
new file mode 100644
index 0000000..78fbbd5
--- /dev/null
+++ b/newinfra/nix/modules/wg-mesh/default.nix
@@ -0,0 +1,7 @@
+{ ... }: {
+  # TODO: put the actual setup here.
+  networking.hosts = {
+    "10.0.0.1" = [ "vps1.local" ];
+    "10.0.0.3" = [ "vps3.local" ];
+  };
+}