_:
{
  systemd.services."wireguard-wg-intra".serviceConfig.LoadCredentialEncrypted = [
    "privateKey:${./wireguard/wg-intra/privateKey.cred}"
  ];
  networking.wireguard.wg-intra.peers.mermet.enable = true;
  networking.wireguard.wg-intra.peers.aubergine.enable = true;
  networking.wireguard.wg-intra.peers.oignon.enable = true;
}