From fe85efa90ecfd45f3078312265138fbee955144f Mon Sep 17 00:00:00 2001
From: nicknase27 <nick@nicknase27.com>
Date: Sat, 25 Jul 2026 23:28:18 +0200
Subject: [PATCH] refactor flake.nix and remove wireguard from secrets.nix

---
 flake.nix           | 34 ++++++++++++++++------------------
 secrets/secrets.nix |  2 --
 2 files changed, 16 insertions(+), 20 deletions(-)

diff --git a/flake.nix b/flake.nix
index 38f2ee1..66cf8c4 100644
--- a/flake.nix
+++ b/flake.nix
@@ -3,29 +3,27 @@
 
   inputs = {
     nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
-		agenix.url = "github:ryantm/agenix";
-		unifi-os-server.url = "github:rcambrj/unifi-os-server";
-
-    # home-manager = {
-    #   url = "github:nix-community/home-manager";
-    #   inputs.nixpkgs.follows = "nixpkgs";
-    # };
+    agenix.url = "github:ryantm/agenix";
+    unifi-os-server.url = "github:rcambrj/unifi-os-server";
   };
 
-  outputs = { self, nixpkgs, agenix, unifi-os-server, ... }@inputs: {
-    # use "nixos", or your hostname as the name of the configuration
-    # it's a better practice than "default" shown in the video
-    nixosConfigurations.Hermes= nixpkgs.lib.nixosSystem {
+  outputs = {
+    self,
+    nixpkgs,
+    agenix,
+    unifi-os-server,
+    ...
+  } @ inputs: {
+    nixosConfigurations.Hermes = nixpkgs.lib.nixosSystem {
       specialArgs = {inherit inputs;};
       modules = [
         ./hosts/hermes/configuration.nix
-				./hosts/hermes/hardware-configuration.nix
-				./modules/homelab.nix
-				./modules/security.nix
-				./modules/system.nix
-				agenix.nixosModules.default
-				unifi-os-server.nixosModules.unifi-os-server
-        # inputs.home-manager.nixosModules.default
+        ./hosts/hermes/hardware-configuration.nix
+        ./modules/homelab.nix
+        ./modules/security.nix
+        ./modules/system.nix
+        agenix.nixosModules.default
+        unifi-os-server.nixosModules.unifi-os-server
       ];
     };
   };
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 4191299..93d0a55 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -8,8 +8,6 @@ in {
   "restic.age".publicKeys = systems;
   "smb.age".publicKeys = systems;
   "gitea-db.age".publicKeys = systems;
-  #"wireguard-private.age".publicKeys = systems;
-  #"wireguard-public.age".publicKeys = systems;
   "navidrome.age".publicKeys = systems;
   "vaultwarden.age".publicKeys = systems;
 }