[vpn] init wireguard

machines/modules/malobeo/peers.nix

@@ -5,7 +5,7 @@
     ips = [ "10.100.0.1/24" ];
     allowedIPs = [ "10.100.0.0/24" ];
     listenPort = 51821;
-    publicKey = "";
+    publicKey = "hF9H10Y8Ar7zvZXFoNM8LSoaYFgPCXv30c54SSEucX4=";
   };
 
   "fanny" = {

machines/vpn/configuration.nix

@@ -3,6 +3,8 @@
 with lib;
 
 {
+  sops.secrets.wg_private = {};
+
   networking = {
     hostName = mkDefault "vpn";
     useDHCP = false;
@@ -15,6 +17,12 @@ with lib;
     ../modules/minimal_tools.nix
   ];
 
+  services.malobeo.vpn = {
+    enable = true;
+    name = "vpn";
+    privateKey = config.sops.secrets.wg_private.path;
+  };
+
   system.stateVersion = "22.11"; # Did you read the comment?
 }