From 4dda24d573daa349f4bb1d400a1e0e423876df77 Mon Sep 17 00:00:00 2001
From: Martin Fischer <martin@push-f.com>
Date: Sun, 14 Dec 2025 20:57:54 +0100
Subject: refactor: move host-specific secrets to host dirs

---
 nixos/shared/secrets/vpn-se-privKey.age | 12 ++++++++++++
 nixos/shared/vpn.nix                    |  2 +-
 2 files changed, 13 insertions(+), 1 deletion(-)
 create mode 100644 nixos/shared/secrets/vpn-se-privKey.age

(limited to 'nixos/shared')

diff --git a/nixos/shared/secrets/vpn-se-privKey.age b/nixos/shared/secrets/vpn-se-privKey.age
new file mode 100644
index 0000000..ca2a8eb
--- /dev/null
+++ b/nixos/shared/secrets/vpn-se-privKey.age
@@ -0,0 +1,12 @@
+age-encryption.org/v1
+-> ssh-ed25519 PMTW+A WNGr/0aVmRRmhZ6P6PaWxPML3VRBi59QTD5kQ2AuqXk
+6ivhC1Cm/DVWdCxx+48U0YzJqhj0rmZ195SmjEX+Y4k
+-> ssh-ed25519 zNg/mg I4MbADHlAgwced5uYaEWXNgKvzfyGxKAWiXtg7rgRCg
+ipQGQn7rCu59gHq5DjQIckvqGO5P/LJTtSP8yViEVdQ
+-> ssh-ed25519 PHC5tQ xsy2ivym+ymHacFJeTwll7aJyypoQTg8h/DyaVp98xs
+rwPb2fCAtHKzUQgZ/0SxKZ37MnVb8u74vesd0o5G7yc
+-> @n>>$-grease @J3N{1sN qN_Oh]I K(#
+dA
+--- P0ZI10bTAqn+OPH84hF1V+Qa/X7gqvMZHkYAZQg5zgo
+ÏãÓv:LÕ“Q	™"[YU”ˆ
+´­K®Y¿ô?Þ+ô$AaúÂÙ?Û`o[k36Œ9«Uû0È®8PHÖ[øÔH´ÉÎ*g±`Ïõ‡w
\ No newline at end of file
diff --git a/nixos/shared/vpn.nix b/nixos/shared/vpn.nix
index 9cbcf45..4015edb 100644
--- a/nixos/shared/vpn.nix
+++ b/nixos/shared/vpn.nix
@@ -1,7 +1,7 @@
 { config, pkgs, ... }:
 
 {
-  age.secrets.vpn-se-privKey.file = ../secrets/vpn-se-privKey.age;
+  age.secrets.vpn-se-privKey.file = ./secrets/vpn-se-privKey.age;
 
   # We're creating the wireguard interfaces in network namespaces so that
   # we can use them on demand:
-- 
cgit v1.3.1