hosts/herra/secrets.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

{...}: {
  age.secrets.wg-key = {
    file = ./secrets/wg-private-key.age;
    path = "/run/secrets/wg.key";
    mode = "0400";
    owner = "root";
  };

  age.secrets.wg-psk = {
    file = ./secrets/wg-psk.age;
    path = "/run/secrets/wg.psk";
    mode = "0400";
    owner = "root";
  };
}