From faf1e32c8a6bdaf5616f075fcca1e2ee121cebe2 Mon Sep 17 00:00:00 2001
From: Grisha Shipunov
Date: Fri, 29 Aug 2025 13:15:13 +0200
Subject: allow null private key for non-flake clients

---
 modules/wg/module.nix | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

(limited to 'modules/wg/module.nix')

diff --git a/modules/wg/module.nix b/modules/wg/module.nix
index 53ed2bb..45a9335 100644
--- a/modules/wg/module.nix
+++ b/modules/wg/module.nix
@@ -50,7 +50,9 @@
             Kind = "wireguard";
             Name = "wg-${net.networkName}";
           };
-          wireguardConfig.PrivateKeyFile = net.hosts.${currenthost}.privateKeyFile;
+          wireguardConfig.PrivateKeyFile =
+            assert !(isNull net.hosts.${currenthost}.privateKeyFile);
+            net.hosts.${currenthost}.privateKeyFile;
           # for client this is only endpoint for now
           wireguardPeers =
             let
@@ -88,7 +90,9 @@
             Kind = "wireguard";
             Name = "wg-${net.networkName}";
           };
-          wireguardConfig.PrivateKeyFile = net.hosts.${currenthost}.privateKeyFile;
+          wireguardConfig.PrivateKeyFile =
+            assert !(isNull net.hosts.${currenthost}.privateKeyFile);
+            net.hosts.${currenthost}.privateKeyFile;
           wireguardConfig.ListenPort = net.hosts.${currenthost}.endpoint.port;
           wireguardPeers =
             let
-- 
cgit v1.3.1