From ed1268a6735d4339aad02fd560dd944167dcda3d Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Sat, 3 Jan 2026 11:32:50 -0800
Subject: move secrets to the hosts instead of profiles

---
 machines/bree.nix | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

(limited to 'machines/bree.nix')

diff --git a/machines/bree.nix b/machines/bree.nix
index f20d612..7fadda0 100644
--- a/machines/bree.nix
+++ b/machines/bree.nix
@@ -23,8 +23,11 @@
 
   wgPublicKey = "bJZyQoemudGJQox8Iegebm23c4BNVIxRPy1kmI2l904=";
 
-  age.secrets.disk-unlock-key.file = ../secrets/bree/disk-unlock-key.age;
-  age.secrets.disk-passphrase.file = ../secrets/bree/disk-passphrase.age;
+  age.secrets = {
+    wireguard.file = ../secrets/bree/wireguard.age;
+    disk-unlock-key.file = ../secrets/bree/disk-unlock-key.age;
+    disk-passphrase.file = ../secrets/bree/disk-passphrase.age;
+  };
 
   services.remoteDiskUnlock = {
     enable = true;
-- 
cgit v1.2.3