{
  flake,
  config,
  pkgs,
  ...
}: {
  config = {
    age.secrets.wg-private-key.file = "${flake.self}/secrets/wg-private-chocolatebar.age";

    pub-solar.wireguard-client = {
      ownIPs = [
        "10.0.1.5/32"
        "fd00:b12f:acab:1312:acab:5::/96"
      ];
      wireguardPrivateKeyFile = "/run/agenix/wg-private-key";
    };
  };
}