vim: use as defaultEditor
[julm/julm-nix.git] / hosts / patate / wireguard.nix
index ee05e16569258bde34992c403a46a2c681475ade..784901b4cfcdfda4c4e930f0a99c6d274c359d93 100644 (file)
@@ -1,6 +1,10 @@
-{ pkgs, lib, config, ... }:
+_:
 {
-networking.wireguard.wg-intra.peers.mermet.enable = true;
-networking.wireguard.wg-intra.peers.losurdo.enable = true;
-networking.wireguard.wg-intra.peers.oignon.enable = true;
+  systemd.services."wireguard-wg-intra".serviceConfig.LoadCredentialEncrypted = [
+    "privateKey:${./wireguard/wg-intra/privateKey.cred}"
+  ];
+  networking.wireguard.wg-intra.peers.mermet.enable = true;
+  networking.wireguard.wg-intra.peers.losurdo.enable = true;
+  networking.wireguard.wg-intra.peers.aubergine.enable = true;
+  networking.wireguard.wg-intra.peers.oignon.enable = true;
 }