all: wireguard add preshared keys and update hierarchy

mediabox/configuration.nix

@@ -26,6 +26,10 @@
     sopsFile = ./secrets/wg_privkey.yaml;
   };
 
+  sops.secrets."wg_preshared/mediabox" = {
+    sopsFile = ../common/secrets/wg_privkey.yaml;
+  };
+
   nix = {
     optimise.automatic = true;
     gc.automatic = true;
@@ -101,6 +105,7 @@
         peers = [
           {
             publicKey = builtins.readFile ../magpie/wg_pubkey;
+            presharedKeyFile = config.sops.secrets."wg_preshared/mediabox".path;
             allowedIPs = ["10.100.0.0/24"];
             endpoint = "5.75.229.224:51820";
             persistentKeepalive = 25;