feat(ymir): add another wireguard config.

modules/linux/nixos/secrets.nix

@@ -12,6 +12,9 @@
         wg-desktop = {
           file = ../../../secrets/wg-desktop.age;
         };
+        wg-home = {
+          file = ../../../secrets/wg-home.age;
+        };
         crony-passwd = {
           file = ../../../secrets/crony-passwd-desktop.age;
         };

modules/linux/nixos/wireguard.nix

@@ -13,5 +13,9 @@
       autostart = false;
       configFile = "${config.age.secrets.wg-desktop.path}";
     };
+    networking.wg-quick.interfaces.wg1 = {
+      autostart = false;
+      configFile = "${config.age.secrets.wg-home.path}";
+    };
   };
 }

secrets/secrets.nix

@@ -17,6 +17,7 @@ in {
   "traefik.age".publicKeys = systems ++ users;
   "wg-heimdall.age".publicKeys = systems ++ users;
   "wg-desktop.age".publicKeys = systems ++ users;
+  "wg-home.age".publicKeys = systems ++ users;
   "rclone.age".publicKeys = systems ++ users;
   "navidrome.age".publicKeys = systems ++ users;
   "forgejo-db.age".publicKeys = systems ++ users;