diff --git a/modules/darwin/programs/wireguard/default.nix b/modules/darwin/programs/wireguard/default.nix
new file mode 100644
index 0000000..7b397ec
--- /dev/null
+++ b/modules/darwin/programs/wireguard/default.nix
@@ -0,0 +1,20 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+let
+  inherit (lib) mkEnableOption mkIf;
+
+  cfg = config.marleyos.programs.wireguard;
+in
+{
+  options.marleyos.programs.wireguard.enable = mkEnableOption "wireguard";
+
+  config = mkIf cfg.enable {
+    homebrew.masApps = {
+      "WireGuard" = 1451685025;
+    };
+  };
+}