enable = lib.mkEnableOption "this peer";
});
config = {
- systemd.services."wireguard-${wgIface}".serviceConfig.LoadCredentialEncrypted =
- [ "privateKey:${inputs.self}/hosts/${hostName}/wireguard/${wgIface}/privateKey.cred" ];
+ #systemd.services."wireguard-${wgIface}".serviceConfig.LoadCredentialEncrypted =
+ # [ "privateKey:${inputs.self}/hosts/${hostName}/wireguard/${wgIface}/privateKey.cred" ];
networking.wireguard.interfaces.${wgIface} = lib.recursiveUpdate
(removeAttrs peers.${hostName} [ "ipv4" "persistentKeepalive" "peer" ])
{