Wireguard VPN Configuration for NixOS

Setting up a local NixOS headless server to route all traffic through a VPN via WireGuard, while still allowing local traffic on specific ports for SSH et al.