allow null private key for non-flake clients

1 files changed, 3 insertions, 1 deletions

diff --git a/modules/wg/options.nix b/modules/wg/options.nix
index d4e8567..c5ed665 100644
--- a/modules/wg/options.nix
+++ b/modules/wg/options.nix
@@ -39,7 +39,9 @@
                       default = null;
                     };
                     privateKeyFile = mkOption {
-                      type = types.path;
+                      # nullOr because non-flake hosts don't need a private key in this repo
+                      # assert in the module checks for the key presence on flake hosts
+                      type = types.nullOr types.path;
                       default = null;
                     };