From 94a7c7195a02de26315ed5bd59e0d0e8b85dbab7 Mon Sep 17 00:00:00 2001
From: Hermes Agent <hermes@lazyworkhorse.net>
Date: Tue, 5 May 2026 02:12:55 +0000
Subject: [PATCH] fix: remove exposed keys from comments

---
 hosts/lazyworkhorse/configuration.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/hosts/lazyworkhorse/configuration.nix b/hosts/lazyworkhorse/configuration.nix
index 69e113e..953c64e 100644
--- a/hosts/lazyworkhorse/configuration.nix
+++ b/hosts/lazyworkhorse/configuration.nix
@@ -50,9 +50,9 @@
   networking.hostId = "deadbeef";
 
   # WireGuard VPN client -- always up, connects to wg-easy server
-  # Before deploying, create age-encrypted secrets:
-  #   echo -n "IOWDh8tH19DGphAkEr46zN0pRl61tmbAynrMkaFo30M=" | agenix -e secrets/wireguard_private_key.age
-  #   echo -n "TIE9hcyOESofAiyJ1Md4CcPruTRXG63rItV9rmV3UDk=" | agenix -e secrets/wireguard_preshared_key.age
+  # Create age-encrypted secrets before deploying (run on the host):
+  #   echo -n "<private_key>" | agenix -e secrets/wireguard_private_key.age
+  #   echo -n "<preshared_key>" | agenix -e secrets/wireguard_preshared_key.age
   networking.wireguard.interfaces = {
     wg0 = {
       ips = [ "10.8.0.3/24" ];