···

       
22
       
22
       
 
       
    ;

     

       
23
       
23
       
 
       
  inherit (lib.modules) mkIf;

     

       
24
       
24
       
 
       
  inherit (lib.options) literalExpression mkOption;

     

       
25
       
25
       
-
       
  inherit (lib.strings) hasInfix;

     

       
25
       
25
       
+
       
  inherit (lib.strings) hasInfix replaceStrings;

     

       
26
       
26
       
 
       
  inherit (lib.trivial) flip pipe;

     

       
27
       
27
       
 
       


     

       
28
       
28
       
 
       
  removeNulls = filterAttrs (_: v: v != null);

     

       
29
       
29
       
 
       


     

       
30
       
30
       
-
       
  privateKeyCredential = interfaceName: "wireguard-${interfaceName}-private-key";

     

       
30
       
30
       
+
       
  escapeCredentialName = input: replaceStrings [ "\\" ] [ "_" ] input;

     

       
31
       
31
       
+
       


     

       
32
       
32
       
+
       
  privateKeyCredential = interfaceName: escapeCredentialName "wireguard-${interfaceName}-private-key";

     

       
31
       
33
       
 
       
  presharedKeyCredential =

     

       
32
       
32
       
-
       
    interfaceName: peer: "wireguard-${interfaceName}-${peer.name}-preshared-key";

     

       
34
       
34
       
+
       
    interfaceName: peer: escapeCredentialName "wireguard-${interfaceName}-${peer.name}-preshared-key";

     

       
33
       
35
       
 
       


     

       
34
       
36
       
 
       
  interfaceCredentials =

     

       
35
       
37
       
 
       
    interfaceName: interface: