summaryrefslogtreecommitdiff
path: root/tw/system/lap.scm
diff options
context:
space:
mode:
Diffstat (limited to 'tw/system/lap.scm')
-rw-r--r--tw/system/lap.scm21
1 files changed, 21 insertions, 0 deletions
diff --git a/tw/system/lap.scm b/tw/system/lap.scm
index 516de321..33154d5b 100644
--- a/tw/system/lap.scm
+++ b/tw/system/lap.scm
@@ -21,6 +21,7 @@
#:use-module (nonguix licenses)
#:use-module (tw channels)
#:use-module (tw packages scanner)
+ #:use-module (tw services secrets)
#:use-module (tw services wireguard)
#:use-module (tw system))
@@ -446,6 +447,26 @@ EndSection
(list vin)
(list lud))))))
+ (service secrets-service-type
+ (secrets-configuration
+ (secrets
+ (list
+ (secret
+ (encrypted-file (local-file "files/wireguard/lap.key.enc"))
+ (destination "/etc/wireguard/private.key"))
+ (secret
+ (encrypted-file (local-file "files/wireguard/lap-fp4.psk.enc"))
+ (destination "/etc/wireguard/fp4.psk"))
+ (secret
+ (encrypted-file (local-file "files/wireguard/lap-lud.psk.enc"))
+ (destination "/etc/wireguard/lud.psk"))
+ (secret
+ (encrypted-file (local-file "files/wireguard/lap-pi3.psk.enc"))
+ (destination "/etc/wireguard/pi3.psk"))
+ (secret
+ (encrypted-file (local-file "files/wireguard/lap-vin.psk.enc"))
+ (destination "/etc/wireguard/vin.psk"))))))
+
(modify-services (append %system-channel-services %desktop-services)
;; Let sane find the airscan backend. ipp-usb needs to be running separately.
(sane-service-type _ => sane-backends/airscan)