Revert "remove wireguard stuff"

This reverts commit 9b8ec24c63.
This reverts commit ec04addf62.

hosts/rico2/network.nix

@@ -1,4 +1,5 @@
 {lib, ...}: {
+  imports = [./wireguard.nix];
   networking = {
     hostName = "Rico2";
     useDHCP = lib.mkDefault false;

hosts/rico2/wireguard.nix

@@ -0,0 +1,23 @@
+{
+  config,
+  secrets,
+  ...
+}: let
+  inherit (secrets.wireguard_config) peers;
+in {
+  networking.wireguard = {
+    enable = true;
+    interfaces = {
+      wg0 = {
+        ips = peers."${config.networking.hostName}".allowedIPs;
+        privateKeyFile = "/etc/wireguard/private.key";
+        generatePrivateKeyFile = true;
+        listenPort = 51820;
+        peers = with peers; [
+          Proxy
+          Skipper
+        ];
+      };
+    };
+  };
+}

hosts/skipper/network.nix

@@ -1,4 +1,5 @@
 {lib, ...}: {
+  imports = [./wireguard.nix];
   networking = {
     hostName = "Skipper";
     networkmanager = {

hosts/skipper/persistence.nix

@@ -5,6 +5,7 @@ _: {
       "/etc/secureboot"
       "/etc/ssh/keys"
       "/etc/systemd/nspawn"
+      "/etc/wireguard"
       "/root/.cache/nix"
       "/var/cache/apparmor"
       "/var/cache/fwupd"

hosts/skipper/wireguard.nix

@@ -0,0 +1,23 @@
+{
+  config,
+  secrets,
+  ...
+}: let
+  inherit (secrets.wireguard_config) peers;
+in {
+  networking.wireguard = {
+    enable = true;
+    interfaces = {
+      wg0 = {
+        ips = peers."${config.networking.hostName}".allowedIPs;
+        privateKeyFile = "/etc/wireguard/private.key";
+        generatePrivateKeyFile = true;
+        listenPort = 51820;
+        peers = with peers; [
+          Proxy
+          Rico2
+        ];
+      };
+    };
+  };
+}