diff options
Diffstat (limited to 'hosts/vidhar')
-rw-r--r-- | hosts/vidhar/network/bifrost/default.nix | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/hosts/vidhar/network/bifrost/default.nix b/hosts/vidhar/network/bifrost/default.nix index 752e3e3c..8c2cc1de 100644 --- a/hosts/vidhar/network/bifrost/default.nix +++ b/hosts/vidhar/network/bifrost/default.nix | |||
@@ -14,7 +14,7 @@ in { | |||
14 | Kind = "wireguard"; | 14 | Kind = "wireguard"; |
15 | }; | 15 | }; |
16 | wireguardConfig = { | 16 | wireguardConfig = { |
17 | PrivateKeyFile = config.sops.secrets.bifrost.path; | 17 | PrivateKeyFile = "/run/credentials/systemd-networkd.service/bifrost.priv"; |
18 | ListenPort = 51822; | 18 | ListenPort = 51822; |
19 | }; | 19 | }; |
20 | wireguardPeers = [ | 20 | wireguardPeers = [ |
@@ -65,12 +65,12 @@ in { | |||
65 | }; | 65 | }; |
66 | }; | 66 | }; |
67 | }; | 67 | }; |
68 | systemd.services."systemd-networkd".serviceConfig.LoadCredential = [ | ||
69 | "bifrost.priv:${config.sops.secrets.bifrost.path}" | ||
70 | ]; | ||
68 | sops.secrets.bifrost = { | 71 | sops.secrets.bifrost = { |
69 | format = "binary"; | 72 | format = "binary"; |
70 | sopsFile = ./vidhar.priv; | 73 | sopsFile = ./vidhar.priv; |
71 | mode = "0640"; | ||
72 | owner = "root"; | ||
73 | group = "systemd-network"; | ||
74 | }; | 74 | }; |
75 | }; | 75 | }; |
76 | } | 76 | } |