From c1f62e9827efe7c8e303e3cfa70dac8f544312b1 Mon Sep 17 00:00:00 2001 From: Gregor Kleen Date: Tue, 9 Aug 2022 11:23:00 +0300 Subject: ... --- hosts/vidhar/network/bifrost/default.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'hosts/vidhar') diff --git a/hosts/vidhar/network/bifrost/default.nix b/hosts/vidhar/network/bifrost/default.nix index 752e3e3c..8c2cc1de 100644 --- a/hosts/vidhar/network/bifrost/default.nix +++ b/hosts/vidhar/network/bifrost/default.nix @@ -14,7 +14,7 @@ in { Kind = "wireguard"; }; wireguardConfig = { - PrivateKeyFile = config.sops.secrets.bifrost.path; + PrivateKeyFile = "/run/credentials/systemd-networkd.service/bifrost.priv"; ListenPort = 51822; }; wireguardPeers = [ @@ -65,12 +65,12 @@ in { }; }; }; + systemd.services."systemd-networkd".serviceConfig.LoadCredential = [ + "bifrost.priv:${config.sops.secrets.bifrost.path}" + ]; sops.secrets.bifrost = { format = "binary"; sopsFile = ./vidhar.priv; - mode = "0640"; - owner = "root"; - group = "systemd-network"; }; }; } -- cgit v1.2.3