thrall: Add wireguard key

hosts/thrall/default.nix

@@ -31,6 +31,11 @@
   # Set your time zone.
   time.timeZone = "Europe/Berlin";
 
+  age.secrets = {
+    mailPass.file = ../../secrets/mailPass.age;
+    wireguard-thrall.file = ../../secrets/wireguard-thrall.age;
+  };
+
   # The global useDHCP flag is deprecated, therefore explicitly set to false here.
   # Per-interface useDHCP will be mandatory in the future, so this generated config
   # replicates the default behaviour.
@@ -141,10 +146,6 @@
     };
   };
 
-  age.secrets = {
-    mailPass.file = ../../secrets/mailPass.age;
-  };
-  
   mailserver = {
     enable = true;
     fqdn = "thrall.failco.de";

secrets/secrets.nix

@@ -6,4 +6,5 @@ let
 in
 {
   "mailPass.age".publicKeys = users ++ systems;
+  "wireguard-thrall.age".publicKeys = [thrall];
 }