anchor.diff:  
       node2 = { pkgs, ... }@attrs:
       let localConf = {
  -        privkpath = pkgs.writeText "priv.key" "eHxSI2jwX/P4AOI0r8YppPw0+4NZnjOxfbS5mt06K2k=";
  +        privk = "eHxSI2jwX/P4AOI0r8YppPw0+4NZnjOxfbS5mt06K2k=";
           pubk = "27s0OvaBBdHoJYkH9osZpjpgSOVNw+RaKfboT/Sfq0g=";
           nodeId = "2";
           peerId = "1";
  
positive.code:   nodes = {
      node1 = { pkgs, ... }@attrs:
      let localConf = {
          privkpath = pkgs.writeText "priv.key" "GDiXWlMQKb379XthwX0haAbK6hTdjblllpjGX0heP00=";
          pubk = "iRxpqj42nnY0Qz8MAQbSm7bXxXP5hkPqWYIULmvW+EE=";
          nodeId = "1";
          peerId = "2";
  
negative.code:       virtualisation.vlans = [ 1 ];
        environment.systemPackages = with pkgs; [ wireguard-tools ];
        boot.extraModulePackages = [ config.boot.kernelPackages.wireguard ];
        systemd.tmpfiles.rules = [
          "f /run/wg_priv 0640 root systemd-network - ${privk}"
        ];
        systemd.network = {
          enable = true;
          netdevs = {
            "90-wg0" = {
              netdevConfig = { Kind = "wireguard"; Name = "wg0"; };
              wireguardConfig = {
                PrivateKeyFile = "/run/wg_priv";
                ListenPort = 51820;
                FwMark = 42;
              };
  