start cage on boot, run saturn

configuration.nix

@@ -169,10 +169,23 @@ SUBSYSTEM=="wwan", ENV{DEVNAME}=="/dev/wwan0qmi0", ENV{DEVTYPE}=="wwan_port", \
       inherit (secrets) wireless;
     };
 
-
     services.openssh.enable = true;
 
-    environment.systemPackages = with pkgs; [ drm-framebuffer];
+    services.cage =
+      let wlinit = pkgs.writeScript "wlinit" ''
+        exec ${saturn}/bin/saturn
+      '';
+      in {
+        enable = true;
+        program = wlinit;
+        user = "dan";
+      };
+
+    environment.systemPackages = with pkgs; [
+      drm-framebuffer
+      saturn
+      satellite
+    ];
 
     users.users.dan = {
       isNormalUser = true;