{
  flake,
  config,
  pkgs,
  ...
}: {
  config = {
    age.secrets.wg-private-key.file = "${flake.self}/secrets/wg-private-biolimo.age";

    pub-solar.wireguard-client = {
      ownIPs = [ "10.0.1.6/32" ];
      wireguardPrivateKeyFile = "/run/agenix/wg-private-key";
    };
  };
}