diff --git a/modules/linux/nixos/secrets.nix b/modules/linux/nixos/secrets.nix index 98e5a47..36f17a6 100644 --- a/modules/linux/nixos/secrets.nix +++ b/modules/linux/nixos/secrets.nix @@ -12,6 +12,9 @@ wg-desktop = { file = ../../../secrets/wg-desktop.age; }; + wg-home = { + file = ../../../secrets/wg-home.age; + }; crony-passwd = { file = ../../../secrets/crony-passwd-desktop.age; }; diff --git a/modules/linux/nixos/wireguard.nix b/modules/linux/nixos/wireguard.nix index 5d8d4e6..f610aef 100644 --- a/modules/linux/nixos/wireguard.nix +++ b/modules/linux/nixos/wireguard.nix @@ -13,5 +13,9 @@ autostart = false; configFile = "${config.age.secrets.wg-desktop.path}"; }; + networking.wg-quick.interfaces.wg1 = { + autostart = false; + configFile = "${config.age.secrets.wg-home.path}"; + }; }; } diff --git a/secrets/secrets.nix b/secrets/secrets.nix index ee51085..829b297 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -17,6 +17,7 @@ in { "traefik.age".publicKeys = systems ++ users; "wg-heimdall.age".publicKeys = systems ++ users; "wg-desktop.age".publicKeys = systems ++ users; + "wg-home.age".publicKeys = systems ++ users; "rclone.age".publicKeys = systems ++ users; "navidrome.age".publicKeys = systems ++ users; "forgejo-db.age".publicKeys = systems ++ users; diff --git a/secrets/wg-home.age b/secrets/wg-home.age new file mode 100644 index 0000000..ee474f4 Binary files /dev/null and b/secrets/wg-home.age differ