flake.lock: Update

Flake lock file updates:

• Updated input 'catppuccin':
    'github:catppuccin/nix/32359bf226fe874d3b7a0a5753d291a4da9616fe' (2024-11-10)
  → 'github:catppuccin/nix/a817009ebfd2cca7f70a77884e5098d0a8c83f8e' (2024-11-30)
• Updated input 'disko':
    'github:nix-community/disko/5fd852c4155a689098095406500d0ae3d04654a8' (2024-11-14)
  → 'github:nix-community/disko/785c1e02c7e465375df971949b8dcbde9ec362e5' (2024-12-02)
• Updated input 'dream2nix':
    'github:nix-community/dream2nix/44d41411686bc798876bd6d9f36a4c1143138d85' (2024-11-12)
  → 'github:nix-community/dream2nix/a8dac99db44307fdecead13a39c584b97812d0d4' (2024-11-21)
• Updated input 'emacs-overlay':
    'github:nix-community/emacs-overlay/4639038b0f5e66e7d0f3d103b8e44ded3ab7e337' (2024-11-14)
  → 'github:nix-community/emacs-overlay/e3ac055c27f9268a294c911578c7cb04c087c7ab' (2024-12-06)
• Updated input 'emacs-overlay/nixpkgs':
    'github:NixOS/nixpkgs/dc460ec76cbff0e66e269457d7b728432263166c' (2024-11-11)
  → 'github:NixOS/nixpkgs/d0797a04b81caeae77bcff10a9dde78bc17f5661' (2024-12-05)
• Updated input 'emacs-overlay/nixpkgs-stable':
    'github:NixOS/nixpkgs/689fed12a013f56d4c4d3f612489634267d86529' (2024-11-12)
  → 'github:NixOS/nixpkgs/b681065d0919f7eb5309a93cea2cfa84dec9aa88' (2024-12-03)
• Updated input 'flakeParts':
    'github:hercules-ci/flake-parts/506278e768c2a08bec68eb62932193e341f55c90' (2024-11-01)
  → 'github:hercules-ci/flake-parts/205b12d8b7cd4802fbcb8e8ef6a0f1408781a4f9' (2024-12-04)
• Updated input 'flakeParts/nixpkgs-lib':
    'cc2f280002.tar.gz?narHash=sha256-lXvH/vOfb4aGYyvFmZK/HlsNsr/0CVWlwYvo2rxJk3s%3D' (2024-11-01)
  → '5487e69da4.tar.gz?narHash=sha256-1qRH7uAUsyQI7R1Uwl4T%2BXvdNv778H0Nb5njNrqvylY%3D' (2024-12-01)
• Updated input 'git-hooks-nix':
    'github:cachix/git-hooks.nix/cd1af27aa85026ac759d5d3fccf650abe7e1bbf0' (2024-11-11)
  → 'github:cachix/git-hooks.nix/6f4e2a2112050951a314d2733a994fbab94864c6' (2024-12-04)
• Updated input 'homeManager':
    'github:nix-community/home-manager/65912bc6841cf420eb8c0a20e03df7cbbff5963f' (2024-12-05)
  → 'github:nix-community/home-manager/d00c6f6d0ad16d598bf7e2956f52c1d9d5de3c3a' (2024-12-06)
• Updated input 'lanzaboote':
    'github:nix-community/lanzaboote/cef39a78679c266300874e7a7000b4da066228d4' (2024-11-04)
  → 'github:nix-community/lanzaboote/2f48272f34174fd2a5ab3df4d8a46919247be879' (2024-11-18)
• Updated input 'lix':
    'git+https://git@git.lix.systems/lix-project/lix?rev=f6077314fa6aff862758095bb55fe844e9162a1d' (2024-10-15)
  → 'git+https://git@git.lix.systems/lix-project/lix?ref=refs/heads/main&rev=f6077314fa6aff862758095bb55fe844e9162a1d' (2024-10-15)
• Updated input 'mobile-nixos':
    'github:NixOS/mobile-nixos/2268e358ed407d9c0a4499ae767d105eeaeec586' (2024-11-06)
  → 'github:NixOS/mobile-nixos/d6befd062162de8a70ae9943b76eb08204446f8a' (2024-11-27)
• Updated input 'nix-fast-build':
    'github:Mic92/nix-fast-build/8e7c9d76979381441facb8888f21408312cf177a' (2024-10-30)
  → 'github:Mic92/nix-fast-build/95f5dc09a725a1916fd064f01eb3be9a5f487095' (2024-12-01)
• Updated input 'nix-fast-build/flake-parts':
    'github:hercules-ci/flake-parts/8471fe90ad337a8074e957b69ca4d0089218391d' (2024-08-01)
  → 'github:hercules-ci/flake-parts/506278e768c2a08bec68eb62932193e341f55c90' (2024-11-01)
• Updated input 'nix-fast-build/treefmt-nix':
    'github:numtide/treefmt-nix/1d07739554fdc4f8481068f1b11d6ab4c1a4167a' (2024-08-16)
  → 'github:numtide/treefmt-nix/6209c381904cab55796c5d7350e89681d3b2a8ef' (2024-11-29)
• Updated input 'nixDarwin':
    'github:LnL7/nix-darwin/6c71c49e2448e51ad830ed211024e6d0edc50116' (2024-11-12)
  → 'github:LnL7/nix-darwin/55d07816a0944f06a9df5ef174999a72fa4060c7' (2024-12-04)
• Updated input 'nixThePlanet':
    'github:MatthewCroughan/NixThePlanet/ef5fad336a55fcbb0680ad21aa58812b2f826435' (2024-11-09)
  → 'github:MatthewCroughan/NixThePlanet/00d07c86548805eab1bc0dac2f95fce8d7e9aac6' (2024-11-24)
• Updated input 'nixosHardware':
    'github:NixOS/nixos-hardware/f6581f1c3b137086e42a08a906bdada63045f991' (2024-11-12)
  → 'github:NixOS/nixos-hardware/e563803af3526852b6b1d77107a81908c66a9fcf' (2024-12-06)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/55d15ad12a74eb7d4646254e13638ad0c4128776' (2024-12-03)
  → 'github:NixOS/nixpkgs/d0797a04b81caeae77bcff10a9dde78bc17f5661' (2024-12-05)
• Updated input 'treefmt-nix':
    'github:numtide/treefmt-nix/746901bb8dba96d154b66492a29f5db0693dbfcc' (2024-10-30)
  → 'github:numtide/treefmt-nix/50862ba6a8a0255b87377b9d2d4565e96f29b410' (2024-12-05)

flake.lock

@@ -119,11 +119,11 @@
         "nixpkgs-stable": "nixpkgs-stable"
       },
       "locked": {
-        "lastModified": 1733361773,
+        "lastModified": 1733473330,
-        "narHash": "sha256-b+cFO1MDGjkR6VnYfTiZTqWQtXbKKFIw0GzvEEzDEOs=",
+        "narHash": "sha256-u+omEO2O4TaUIxOCkCBbgYC9piLN4NEiq/nYwB8hCRY=",
         "owner": "nix-community",
         "repo": "emacs-overlay",
-        "rev": "2e6e7801a515f8dbece2d888244a6a2604e36e86",
+        "rev": "e3ac055c27f9268a294c911578c7cb04c087c7ab",
         "type": "github"
       },
       "original": {
@@ -485,11 +485,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1733389730,
+        "lastModified": 1733484277,
-        "narHash": "sha256-KZMu4ddMll5khS0rYkJsVD0hVqjMNHlhTM3PCQar0Ag=",
+        "narHash": "sha256-i5ay20XsvpW91N4URET/nOc0VQWOAd4c4vbqYtcH8Rc=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "65912bc6841cf420eb8c0a20e03df7cbbff5963f",
+        "rev": "d00c6f6d0ad16d598bf7e2956f52c1d9d5de3c3a",
         "type": "github"
       },
       "original": {
@@ -778,11 +778,11 @@
     },
     "nixosHardware": {
       "locked": {
-        "lastModified": 1733217105,
+        "lastModified": 1733481457,
-        "narHash": "sha256-fc6jTzIwCIVWTX50FtW6AZpuukuQWSEbPiyg6ZRGWFY=",
+        "narHash": "sha256-IS3bxa4N1VMSh3/P6vhEAHQZecQ3oAlKCDvzCQSO5Is=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "cceee0a31d2f01bcc98b2fbd591327c06a4ea4f9",
+        "rev": "e563803af3526852b6b1d77107a81908c66a9fcf",
         "type": "github"
       },
       "original": {
@@ -935,11 +935,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1733212471,
+        "lastModified": 1733392399,
-        "narHash": "sha256-M1+uCoV5igihRfcUKrr1riygbe73/dzNnzPsmaLCmpo=",
+        "narHash": "sha256-kEsTJTUQfQFIJOcLYFt/RvNxIK653ZkTBIs4DG+cBns=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "55d15ad12a74eb7d4646254e13638ad0c4128776",
+        "rev": "d0797a04b81caeae77bcff10a9dde78bc17f5661",
         "type": "github"
       },
       "original": {
@@ -996,11 +996,11 @@
     },
     "nixpkgs_7": {
       "locked": {
-        "lastModified": 1733212471,
+        "lastModified": 1733392399,
-        "narHash": "sha256-M1+uCoV5igihRfcUKrr1riygbe73/dzNnzPsmaLCmpo=",
+        "narHash": "sha256-kEsTJTUQfQFIJOcLYFt/RvNxIK653ZkTBIs4DG+cBns=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "55d15ad12a74eb7d4646254e13638ad0c4128776",
+        "rev": "d0797a04b81caeae77bcff10a9dde78bc17f5661",
         "type": "github"
       },
       "original": {
@@ -1325,11 +1325,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1733222881,
+        "lastModified": 1733440889,
-        "narHash": "sha256-JIPcz1PrpXUCbaccEnrcUS8jjEb/1vJbZz5KkobyFdM=",
+        "narHash": "sha256-qKL3vjO+IXFQ0nTinFDqNq/sbbnnS5bMI1y0xX215fU=",
         "owner": "numtide",
         "repo": "treefmt-nix",
-        "rev": "49717b5af6f80172275d47a418c9719a31a78b53",
+        "rev": "50862ba6a8a0255b87377b9d2d4565e96f29b410",
         "type": "github"
       },
       "original": {

hmModules/cura/default.nix

@@ -4,7 +4,7 @@
     (
       let
         cura5 = pkgs.appimageTools.wrapType2 rec {
-          name = "cura5";
+          pname = "cura5";
           version = "5.8.0";
           src = pkgs.fetchurl {
             url = "https://github.com/Ultimaker/Cura/releases/download/${version}/UltiMaker-Cura-${version}-linux-X64.AppImage";

hmModules/emacs/init.el

@@ -881,6 +881,8 @@ This is meant to be an helper to be called from the window manager."
   :custom
   (gptel-api-key (lambda () (require 'f) (f-read-text (getenv "OPENAI_API_KEY_PATH"))))
   (gptel-model 'gpt-4o)
+  (gptel-default-mode 'org-mode)
+  (gptel-org-branching-context 't)
   :config
   (require 'gptel-curl)
 
@@ -919,6 +921,9 @@ This is meant to be an helper to be called from the window manager."
     ) ;; destroy frame on exit
   )
 
+(use-package mixed-pitch
+  :hook (text-mode . mixed-pitch-mode))
+
 (use-package pass
   :config
   (require 'password-store-otp) ;; FIXME use `use-pacakge' idiomatic way
@@ -967,5 +972,26 @@ This is meant to be an helper to be called from the window manager."
      (:name "GitHub" :query "tag:github" :key "g")
      (:name "Trash" :query "tag:trash" :key "t"))))
 
+;;; Experiments, remove from here
+
+(defun ccr/test ()
+  "test"
+  (interactive)
+  (with-selected-frame 
+      (make-frame '((name . "emacs-run-launcher")
+                    (minibuffer . only)
+                    (fullscreen . 0) ; no fullscreen
+                    (undecorated . t) ; remove title bar
+                    ;;(auto-raise . t) ; focus on this frame
+                    ;;(tool-bar-lines . 0)
+                    ;;(menu-bar-lines . 0)
+                    (internal-border-width . 10)
+                    (width . 80)
+                    (height . 11)))
+    (unwind-protect
+	(completing-read "ciao " '("foo" "bar") nil t "")
+      (delete-frame))))
+
+
 (provide 'init)
 ;;; init.el ends here

hmModules/sdrangel/default.nix

@@ -0,0 +1,7 @@
+{ pkgs, ... }:
+{
+  home.packages = [
+    pkgs.sdrangel
+    pkgs.kdePackages.qtlocation
+  ];
+}

hmModules/shell/default.nix

@@ -4,6 +4,7 @@
   age,
   hostname,
   config,
+  username,
   ...
 }:
 {
@@ -59,7 +60,7 @@
     settings = {
       daemon = {
         enabled = true;
-        socket_path = "/home/ccr/.local/share/atuin/atuin.sock"; # FIXME using ~ or $HOME doesn't work: https://github.com/atuinsh/atuin/issues/2289
+        socket_path = "/home/${username}/.local/share/atuin/atuin.sock"; # FIXME using ~ or $HOME doesn't work: https://github.com/atuinsh/atuin/issues/2289
       };
       auto_sync = true;
       sync_frequency = "5m";

hosts/default.nix

@@ -119,6 +119,20 @@
 
         };
       };
+
+      tpol = {
+        extraModules = with inputs; [
+          lix-module.nixosModules.default
+        ];
+        secrets = {
+          "tpol-wireguard-private-key" = { };
+        };
+        vpn = {
+          ip = "10.100.0.7";
+          publicKey = "b/Pi7koTFo5CMAAzcL2ulvQ/0dUjKzbmXpvh4Lb/Bgo=";
+        };
+        extraHmModulesUser = "mara";
+      };
     };
 
     vpnExtra = {

hosts/kirk/default.nix

@@ -40,7 +40,7 @@
 
   ccr = {
     enable = true;
-    autologin = true;
+    autologin = false;
     modules = [
       "git"
       "git-workspace"
@@ -72,6 +72,8 @@
       "catppuccin"
       "libreoffice"
       "emacs"
+      "chirp"
+      "sdrangel"
     ];
     extraGroups = [ ];
     backupPaths = [ ];
@@ -99,6 +101,7 @@
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
   powerManagement.cpuFreqGovernor = lib.mkDefault "schedutil";
   hardware.enableRedistributableFirmware = lib.mkDefault true;
+  hardware.rtl-sdr.enable = true;
 
   hardware.graphics = {
     enable = true;

hosts/picard/default.nix

@@ -91,8 +91,9 @@
       "emacs"
       "vial"
       "chirp"
+      "sdrangel"
     ];
-    extraGroups = [ ];
+    extraGroups = [ "plugdev" ];
     backupPaths = [ ];
   };
 

hosts/sisko/disko.nix

@@ -66,8 +66,11 @@ in
               size = "100%";
               content = {
                 type = "filesystem";
-                format = "bcachefs";
+                format = "xfs";
                 mountpoint = "/mnt/hd";
+                mountOptions = [
+                  "nofail"
+                ];
               };
             };
           };

hosts/spock/default.nix

@@ -0,0 +1,48 @@
+{
+  lib,
+  modulesPath,
+  ...
+}:
+{
+  imports = [
+    "${modulesPath}/installer/sd-card/sd-image-aarch64.nix"
+  ];
+
+  sdImage.compressImage = false;
+
+  nixpkgs = {
+    # hostPlatform = lib.mkDefault "armv6-linux";
+    # config = {
+    #   allowUnfree = true;
+    # };
+    # overlays = [
+    #   # Workaround: https://github.com/NixOS/nixpkgs/issues/154163
+    #   # modprobe: FATAL: Module sun4i-drm not found in directory
+    #   (final: super: {
+    #     makeModulesClosure = x:
+    #       super.makeModulesClosure (x // {allowMissing = true;});
+    #   })
+    # ];
+  };
+
+  fileSystems = {
+    "/" = {
+      device = "/dev/disk/by-label/NIXOS_SD";
+      fsType = "ext4";
+      options = [ "noatime" ];
+    };
+  };
+
+  networking = {
+    networkmanager.enable = false;
+  };
+
+  # Set your time zone.
+  time.timeZone = "Europe/Rome";
+
+  # Allow the user to log in as root without a password.
+  users.users.root.initialHashedPassword = "";
+
+  hardware.enableRedistributableFirmware = true;
+  system.stateVersion = "24.11";
+}

hosts/tpol/default.nix

@@ -0,0 +1,94 @@
+{
+  modulesPath,
+  fleetModules,
+  pkgs,
+  lib,
+  vpn,
+  config,
+  ...
+}:
+{
+  imports =
+    [ (modulesPath + "/installer/scan/not-detected.nix") ]
+    ++ fleetModules [
+      "common"
+      "ssh"
+      "nix"
+      "networkmanager"
+      "dbus"
+      "udisks2"
+      "xdg"
+      "printing"
+      "mara"
+      "xfce"
+      "battery"
+      "printing"
+      "wireguard-client"
+    ];
+
+  boot.initrd.availableKernelModules = [
+    "xhci_pci"
+    "ehci_pci"
+    "ahci"
+    "usb_storage"
+    "sd_mod"
+    "sr_mod"
+    "rtsx_pci_sdmmc"
+  ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+  boot.loader.grub.device = "/dev/sda";
+
+  fileSystems."/" = {
+    device = "/dev/disk/by-uuid/1522f8d9-5251-408d-9b6e-ed6da7da916a";
+    fsType = "btrfs";
+  };
+
+  swapDevices = [
+    { device = "/dev/disk/by-uuid/e111fbc7-8e5d-4fcb-95c9-249f53ab0adc"; }
+  ];
+
+  mara = {
+    enable = true;
+    modules = [
+      "shell"
+      "mpv"
+      "firefox"
+      "git"
+      "chrome"
+      "udiskie"
+      "helix"
+      "remmina"
+    ];
+  };
+
+  # nevertheless this is a laptop the battery is completely gone, so it works only attached to electrictiy
+  powerManagement.cpuFreqGovernor = lib.mkDefault "performance";
+
+  networking.firewall.allowedTCPPorts = [ 1234 ];
+
+  hardware.rtl-sdr.enable = true;
+
+  systemd.services.rtl-tcp = {
+    description = "rtl_sdr over TCP";
+    wantedBy = [ "multi-user.target" ];
+    serviceConfig = {
+      ExecStart = ''
+        ${lib.getExe' pkgs.rtl-sdr "rtl_tcp"} -a ${vpn.${config.networking.hostName}}
+      '';
+    };
+  };
+
+  systemd.services.sdrangelsrv = {
+    description = "sdrangelsrv";
+    wantedBy = [ "multi-user.target" ];
+    serviceConfig = {
+      ExecStart = ''
+        ${lib.getExe' pkgs.sdrangel "sdrangelsrv"} --remote-tcp-hwtype RTLSDR --remote-tcp-port 1234 --remote-tcp-address ${
+          vpn.${config.networking.hostName}
+        } --remote-tcp
+      '';
+    };
+  };
+}

lib/default.nix

@@ -12,6 +12,7 @@
       pbp = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFF05LScu9m5BXMlFAT1g+g/AkAi7kvq1dY6W3Rzqq3f";
       picard = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ1+1z1IsLVJ6aGarMgzw3NbmFKcpYVgdUjl7xDsewxT";
       deltaflyer = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPETMwELvGTnhKJbpK0oFs4lK8vm/kV9KdgL9wufYDDQ";
+      tpol = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIQxHSow2l0TDWTonBPPaGvTgVvMS/xsQOf1nHnvLSwV";
     };
   };
 }

modules/binfmt/default.nix

@@ -3,9 +3,10 @@
     "i686-linux"
     "aarch64-linux"
     "riscv64-linux"
+    "armv6l-linux"
   ];
   nix.extraOptions = ''
-    extra-platforms = aarch64-linux arm-linux i686-linux riscv64-linux
+    extra-platforms = aarch64-linux arm-linux i686-linux riscv64-linux armv6l-linux
   '';
 
   # XXX For some reason `docker buildx` isn't aware of this:

modules/ccr/default.nix

@@ -86,6 +86,7 @@ in
           "dialout"
           "systemd-journal"
           "camera"
+          "networkmanager"
         ];
         ccr.modules = [
           "shell"

modules/fonts/default.nix

@@ -1,19 +1,21 @@
 { pkgs, ... }:
 {
   fonts = {
-    packages = with pkgs; [
+    packages =
-      powerline-fonts
+      with pkgs;
-      dejavu_fonts
+      [
-      fira-code
+        powerline-fonts
-      fira-code-symbols
+        dejavu_fonts
-      iosevka
+        fira-code
-      iosevka-comfy.comfy
+        fira-code-symbols
-      emacs-all-the-icons-fonts
+        iosevka
-      nerdfonts
+        iosevka-comfy.comfy
-      joypixels
+        emacs-all-the-icons-fonts
-      etBook
+        joypixels
-      vegur
+        etBook
-    ];
+        vegur
+      ]
+      ++ (builtins.filter lib.attrsets.isDerivation (builtins.attrValues nerd-fonts));
     fontconfig.defaultFonts = {
       monospace = [ "DejaVu Sans Mono for Powerline" ];
       sansSerif = [ "DejaVu Sans" ];

modules/mara/default.nix

@@ -4,6 +4,7 @@
   pkgs,
   fleetHmModules,
   fleetFlake,
+  vpn,
   ...
 }:
 {
@@ -46,20 +47,33 @@
       default = [
         "wheel"
         "fuse"
-        "networkmanager"
+        "video"
         "dialout"
+        "systemd-journal"
+        "camera"
+        "networkmanager"
       ];
     };
   };
 
   config = lib.mkIf config.mara.enable {
+
+    programs.fish.enable = true;
+
+    mara.modules = [
+      "shell"
+      "git"
+      "nix-index"
+      "btop"
+    ];
+
     users.users.mara = {
       uid = 1001;
       inherit (config.mara) hashedPassword;
       description = "Mara Savastano";
       isNormalUser = true;
       inherit (config.mara) extraGroups;
-      shell = pkgs.nushell;
+      shell = pkgs.fish;
       openssh.authorizedKeys.keys = config.mara.authorizedKeys;
     };
 
@@ -68,7 +82,16 @@
     home-manager.useGlobalPkgs = true;
     home-manager.useUserPackages = true;
     home-manager.users.mara = {
-      imports = fleetHmModules config.mara.modules;
+      imports = fleetHmModules config.mara.modules ++ [
+        {
+          _module.args = {
+            inherit (config.age) secrets;
+            inherit vpn;
+            username = "mara";
+            hostname = config.networking.hostName;
+          };
+        }
+      ];
       home.packages = config.mara.packages;
       home.stateVersion = config.system.stateVersion;
     };

modules/networkmanager/default.nix

@@ -1,6 +1,5 @@
 { lib, ... }:
 {
   networking.networkmanager.enable = true;
-  ccr.extraGroups = [ "networkmanager" ];
   networking.useDHCP = lib.mkDefault true;
 }

modules/xfce/default.nix

@@ -5,10 +5,11 @@
       xterm.enable = false;
       xfce.enable = true;
     };
-    displayManager = {
+  };
-      defaultSession = "xfce";
+
-      autoLogin.user = "mara";
+  services.displayManager = {
-    };
+    defaultSession = "xfce";
+    autoLogin.user = "mara";
   };
 
   home-manager.users.mara.home.file."background-image" = {

packages/emacs/packages.nix

@@ -118,6 +118,7 @@ let
           solidity-mode
           telega
           aggressive-indent
+          mixed-pitch
           # org-re-reveal # FIXME very not nice hash mismatch when building
         ]
       )

secrets/secrets.nix

@@ -182,4 +182,8 @@ with keys.users;
 
     deltaflyer
   ];
+  "tpol-wireguard-private-key.age".publicKeys = [
+    ccr-ssh
+    tpol
+  ];
 }

secrets/tpol-wireguard-private-key.age

@@ -0,0 +1,17 @@
+age-encryption.org/v1
+-> ssh-rsa /AagBw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+-> ssh-ed25519 X7Q5KQ UoryJKCMOKeAkI1dbz8On5q0wSd+XIUCdWI31gyS6D4
+exrVhh9tGzQyToDKcv5sspbeKhdTp1q0wKuHWo+onKQ
+--- QkkySHHmaJFZu2BNT0ZZ9NZipUbFqyzxL32YZx5DRbQ
+wc¿^«Ò[v$jªš”ž7Lmt´{<7B>øù`¾ü0©—]ÿ¸lè<6C>¾…–3¢ñ<C2A2>…ã
šð{C²\µ±ßXƒZ§Œ°¸)Z$¿4d›„/.L