{...}: {
  age.secrets.wg-key = {
    file = ./secrets/wg-private-key.age;
    path = "/run/secrets/wg.key";
    mode = "0400";
    owner = "root";
  };

  age.secrets.wg-psk = {
    file = ./secrets/wg-psk.age;
    path = "/run/secrets/wg.psk";
    mode = "0400";
    owner = "root";
  };
}