feat: add Wireguard interface model

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>

manifest.yaml

@@ -4,6 +4,25 @@ metadata:
   name: veil
 spec:
   containers:
+    - name: veil
+      image: registry.karaolidis.com/karaolidis/veil:latest
+      volumeMounts:
+        - name: veil-config
+          mountPath: /etc/veil
+      command:
+        [
+          "veil",
+          "--config",
+          "/etc/veil/default.yml",
+          --log-config,
+          "/etc/veil/log4rs.yml",
+        ]
+      securityContext:
+        capabilities:
+          add:
+            - NET_ADMIN
+            - NET_RAW
+
     - name: postgresql
       image: docker.io/library/postgres:latest
       env:
@@ -23,20 +42,6 @@ spec:
         - name: authelia-config
           mountPath: /config
 
-    - name: veil
-      image: registry.karaolidis.com/karaolidis/veil:latest
-      volumeMounts:
-        - name: veil-config
-          mountPath: /etc/veil
-      command:
-        [
-          "veil",
-          "--config",
-          "/etc/veil/default.yml",
-          --log-config,
-          "/etc/veil/log4rs.yml",
-        ]
-
     - name: traefik
       image: docker.io/library/traefik:latest
       args: