From 353ee5f04f0837473f0a2f1a709fd4186cf45397 Mon Sep 17 00:00:00 2001
From: Crony Akatsuki <crony@cronyakatsuki.xyz>
Date: Sun, 1 Feb 2026 19:04:03 +0100
Subject: [PATCH] feat: remove unused secrets.

---
 modules/servers/per-server/tyr/secrets.nix        | 12 ------------
 modules/servers/per-server/tyr/services/incus.nix |  5 +++++
 2 files changed, 5 insertions(+), 12 deletions(-)
 create mode 100644 modules/servers/per-server/tyr/services/incus.nix

diff --git a/modules/servers/per-server/tyr/secrets.nix b/modules/servers/per-server/tyr/secrets.nix
index 340878d..53a28d1 100644
--- a/modules/servers/per-server/tyr/secrets.nix
+++ b/modules/servers/per-server/tyr/secrets.nix
@@ -47,18 +47,6 @@
       paperless-ngx = {
         file = "${inputs.secrets}/secrets/paperless-ngx.age";
       };
-      wg-wireproxy = {
-        file = "${inputs.secrets}/secrets/wg-wireproxy.age";
-        owner = "wireproxy";
-        group = "wireproxy";
-      };
-      wireproxy = {
-        file = "${inputs.secrets}/secrets/wireproxy.age";
-        path = "/etc/wireproxy/wireproxy.conf";
-        owner = "wireproxy";
-        group = "wireproxy";
-        symlink = false;
-      };
     };
   };
 }
diff --git a/modules/servers/per-server/tyr/services/incus.nix b/modules/servers/per-server/tyr/services/incus.nix
new file mode 100644
index 0000000..b77aa28
--- /dev/null
+++ b/modules/servers/per-server/tyr/services/incus.nix
@@ -0,0 +1,5 @@
+{
+  virtualisation.incus.enable = true;
+
+  networking.nftables.enable = true;
+}