magpie/wireguard: add mediabox preshared key

.sops.yaml

@@ -2,11 +2,29 @@ keys:
   - &magpie       age153y8mz6gqy5t54q4fnrdvjj4v5ls9cgp3hhpd2hzf5tvkcnncf6q4xns0j
   - &mediabox     age19yrl6pr73cv067ksfz0txp3zm2au25jfyjeerw23ml55ps5cyyfqtm3kmt
   - &nixy         age1geqqmsnng2e9sja6uxxmtlwlm4c6e5v6ch3l3yjenstq6tjq4fusr0305s
+
 creation_rules:
 
-  - path_regex: secrets/[^/]+\.yaml$
+  - path_regex: common/secrets/[^/]+\.yaml$
     key_groups:
     - age:
       - *magpie
       - *mediabox
       - *nixy
+
+  - path_regex: magpie/secrets/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *magpie
+      - *nixy
+
+  - path_regex: mediabox/secrets/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *mediabox
+      - *nixy
+
+  - path_regex: nixy/secrets/[^/]+\.yaml$
+    key_groups:
+    - age:
+      - *nixy

magpie/configuration.nix

@@ -304,6 +304,10 @@
     sopsFile = ../common/secrets/wg_preshared.yaml;
   };
 
+  sops.secrets."wg_preshared/mediabox" = {
+    sopsFile = ../common/secrets/wg_preshared.yaml;
+  };
+
   sops.secrets."borgbase_enc_key" = {
     sopsFile = ./secrets/borgbase_enc_key.yaml;
   };