_:
{
  systemd.services."wireguard-wg-intra".serviceConfig.LoadCredentialEncrypted = [
    "privateKey:${./wireguard/wg-intra/privateKey.cred}"
  ];
  networking.wireguard.wg-intra.peers = {
    mermet.enable = true;
    losurdo.enable = true;
    patate.enable = true;
    aubergine.enable = true;
  };
}