magpie/wireguard: add preshared key

2024-04-20 20:18:06 +02:00
parent a3017e3f8c
commit d7096e4051
1 changed files with 5 additions and 0 deletions
--- a/magpie/configuration.nix
+++ b/magpie/configuration.nix
@@ -300,6 +300,10 @@
    sopsFile = ./secrets/wg_privkey.yaml;
  };

+  sops.secrets."wg_preshared" = {
+    sopsFile = ./secrets/wg_preshared.yaml;
+  };
+
  sops.secrets."borgbase_enc_key" = {
    sopsFile = ./secrets/borgbase_enc_key.yaml;
  };
@@ -342,6 +346,7 @@
      peers = [
        {
          publicKey = builtins.readFile ../nixy/wg_pubkey;
+	  presharedKeyFile = config.sops.secrets."wg_preshared".path;
          allowedIPs = ["10.100.0.6/32"];
        }
        {