{
  flake,
  config,
  pkgs,
  ...
}: {
  config = {
    age.secrets.wg-private-key.file = "${flake.self}/secrets/wg-private-droppie.age";

    pub-solar.wireguard-client = {
      ownIPs = [
        "10.0.1.3/32"
        "fd00:acab:1312:acab:3::/128"
      ];
      wireguardPrivateKeyFile = "/run/agenix/wg-private-key";
    };
  };
}