modules: secrets: move wireguard keys

This is a bit special, as some of the keys do not belong to NixOS hosts,
so store those in the module itself, and into host-specific directories
for the keys that are NixOS hosts.

hosts/nixos/aramis/secrets/secrets.nix

@@ -9,5 +9,5 @@ let
   ];
 in
 {
-  # Add secrets here
+  "wireguard/private-key.age".publicKeys = all;
 }

hosts/nixos/porthos/secrets/secrets.nix

@@ -59,6 +59,8 @@ in
 
   "transmission/credentials.age".publicKeys = all;
 
+  "wireguard/private-key.age".publicKeys = all;
+
   "woodpecker/gitea.age".publicKeys = all;
   "woodpecker/secret.age".publicKeys = all;
   "woodpecker/ssh/private-key.age".publicKeys = all;

hosts/nixos/porthos/secrets/wireguard/private-key.age

@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> ssh-ed25519 cKojmg +WwRpd2MzycutQFXyLsr2+GzSgF67Z6UuvyqYZaLd3w
+sppt8HzaZP3yxnvnhzjl18Trnz8g3VyXJ6CaVBWd7jA
+-> ssh-ed25519 jPowng wanoqGB7T8bim/WZ4IAYViFQoGzaIZSgeoTr3YKpeTY
+ihDAdGa1XVW/qQz40V1v7a7iK7tu0EHMa7ayIogpcRw
+-> l-grease |PIcZ NIr >0;*
+4o8o0bevQZ6uDSx1WxxlDCURbFCM+yK1XPdrb9aztCSvG2a+ne78E42l5rBcoH7I
+m51A8uWS4nSj36N/76v6K4kelxKzWUg
+--- O6cGbTAVbDcdmPHf7UzfZiyiRtu1yfL4sBI+CkJA1qw
+ý
qýŐ$ň`żw'čS“X¸]Ąá÷ř®úî…?¤6‹Đ/ĆN(Bžň N«a”.˙ HŽ7żí•I<E280A2>ú÷Ŕoz‡/4:sK",7J