···302302 ###### implementation
303303304304 config = mkIf (cfg.interfaces != {}) {
305305- boot.extraModulePackages = [ kernel.wireguard ];
305305+ boot.extraModulePackages = optional (versionOlder kernel.kernel.version "5.6") kernel.wireguard;
306306 environment.systemPackages = [ pkgs.wireguard-tools ];
307307 # This is forced to false for now because the default "--validmark" rpfilter we apply on reverse path filtering
308308 # breaks the wg-quick routing because wireguard packets leave with a fwmark from wireguard.