Added agenix config and wireguard secrets

1 files changed, 15 insertions, 0 deletions

diff --git a/hosts/herra/secrets.nix b/hosts/herra/secrets.nix
new file mode 100644
index 0000000..e8a3126
--- /dev/null
+++ b/hosts/herra/secrets.nix
@@ -0,0 +1,15 @@
+{...}: {
+  age.secrets.wg-key = {
+    file = ./secrets/wg-private-key.age;
+    path = "/run/secrets/wg.key";
+    mode = "0400";
+    owner = "root";
+  };
+
+  age.secrets.wg-psk = {
+    file = ./secrets/wg-psk.age;
+    path = "/run/secrets/wg.psk";
+    mode = "0400";
+    owner = "root";
+  };
+}