System Gen159 @ 2025-04-23-00:25:53

hosts/comfy-station/configuration.nix

@@ -2,6 +2,7 @@
 # your system.  Help is available in the configuration.nix(5) man page
 # and in the NixOS manual (accessible by running ‘nixos-help’).
 {
+  config,
   pkgs,
   inputs,
   ...
@@ -18,9 +19,18 @@
     ../../modules/hardware/printing.nix
     ../../modules/hardware/sound.nix
     ../../modules/hardware/yubikey.nix
+    ../../modules/networking/wireguard
     ../../modules/programs.nix
     ../../modules/services/virt-manager.nix
   ];
+
+  # Secret management
+  sops.age.keyFile = "/var/lib/sops-nix/key.txt";
+  sops.secrets.wg-priv = {
+    sopsFile = ../../secrets/comfy-station/wg.yaml;
+    key = "privateKey";
+  };
+
   desktop.dm.name = "sddm";
   desktop.de.plasma.enable = false;
   desktop.de.hyprland.enable = true;
@@ -83,6 +93,10 @@
   # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
   system.stateVersion = "24.11"; # Did you read the comment?
 
+  # wg client
+  networking.wg.client.enable = true;
+  networking.wg.client.privateKeyFile = config.sops.secrets.wg-priv.path;
+
   # boot
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;