Limit wireguard hosts to wireguard-enabled hosts

2 files changed, 14 insertions, 14 deletions

diff --git a/flakes/flake.lock b/flakes/flake.lock
index 75677c7..2b6d84a 100644
--- a/flakes/flake.lock
+++ b/flakes/flake.lock
@@ -3818,7 +3818,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-ZHehuF4gKmUT5HHNMZWUXmUO5was3LjBT0XUFbtC3ME=",
+        "narHash": "sha256-6XWbafDuH63vuds7ZSaai1UO02xkhumDjT1oEioX7u0=",
         "path": "../systems/backup-2",
         "type": "path"
       },
@@ -3841,7 +3841,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-bSv+4WJJsHgg+WyqqT68jQVzCuvfYWwwS7WM1FA+GpU=",
+        "narHash": "sha256-Bt+EyQNXxATScgdFH69I1qR0n6J1BE3gy8l2iastAFo=",
         "path": "../systems/dilion",
         "type": "path"
       },
@@ -3890,7 +3890,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-RfVz/T1ZGq//oGdyFAHTGYnquMGQ2Z1iVGdJIhi2iMo=",
+        "narHash": "sha256-XI3Hd5sfsPp8/oiqiB5QIzRX8kM5RaJoEgBa41WdVpI=",
         "path": "../systems/eldiron",
         "type": "path"
       },
@@ -3916,7 +3916,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-JEX+epBO3lxnGu5WtYc78V6PmQqDvWOada8/N/5sBbI=",
+        "narHash": "sha256-jLfonpeyLVbLJ4mDHFZoBeNEg3t/yS7t0DMGH5lHlyI=",
         "path": "../systems/monitoring-1",
         "type": "path"
       },
@@ -3941,7 +3941,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-EPiMbYALY6ZXf7ZwBOLzgRL9nH19XV0Ooe9jMCATM88=",
+        "narHash": "sha256-iqBGLdwWzpRUVYjKQY0AKG32LbDkbpSxJibBIIGrAJg=",
         "path": "../systems/quatresaisons",
         "type": "path"
       },
@@ -3962,7 +3962,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-ljV+NXn1W8rIrz6FU9gbjNCt4MEcNRGyNBofIyieJMo=",
+        "narHash": "sha256-fefjcy/F/KPaDFOKzeA0DUDrDq1fIwmWT+6jtVqRR54=",
         "path": "../systems/zoldene",
         "type": "path"
       },
@@ -7598,7 +7598,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VUtVclRBHcgFrAuf3tdhcA/f1h7U1gBj7KFu0lAnP34=",
+        "narHash": "sha256-QVPEROHdMcOAF3O0z6aPugh/Te7FAfFYMmrSwK6y3J8=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -7617,7 +7617,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VUtVclRBHcgFrAuf3tdhcA/f1h7U1gBj7KFu0lAnP34=",
+        "narHash": "sha256-QVPEROHdMcOAF3O0z6aPugh/Te7FAfFYMmrSwK6y3J8=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -8525,7 +8525,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VUtVclRBHcgFrAuf3tdhcA/f1h7U1gBj7KFu0lAnP34=",
+        "narHash": "sha256-QVPEROHdMcOAF3O0z6aPugh/Te7FAfFYMmrSwK6y3J8=",
         "path": "./private/system",
         "type": "path"
       },
@@ -9179,7 +9179,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VUtVclRBHcgFrAuf3tdhcA/f1h7U1gBj7KFu0lAnP34=",
+        "narHash": "sha256-QVPEROHdMcOAF3O0z6aPugh/Te7FAfFYMmrSwK6y3J8=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -9198,7 +9198,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VUtVclRBHcgFrAuf3tdhcA/f1h7U1gBj7KFu0lAnP34=",
+        "narHash": "sha256-QVPEROHdMcOAF3O0z6aPugh/Te7FAfFYMmrSwK6y3J8=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -9217,7 +9217,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VUtVclRBHcgFrAuf3tdhcA/f1h7U1gBj7KFu0lAnP34=",
+        "narHash": "sha256-QVPEROHdMcOAF3O0z6aPugh/Te7FAfFYMmrSwK6y3J8=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -9236,7 +9236,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VUtVclRBHcgFrAuf3tdhcA/f1h7U1gBj7KFu0lAnP34=",
+        "narHash": "sha256-QVPEROHdMcOAF3O0z6aPugh/Te7FAfFYMmrSwK6y3J8=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
diff --git a/flakes/private/system/flake.nix b/flakes/private/system/flake.nix
index 1526f87..e040b84 100644
--- a/flakes/private/system/flake.nix
+++ b/flakes/private/system/flake.nix
@@ -25,7 +25,7 @@
 
           networking.extraHosts = lib.mkMerge [
             (builtins.concatStringsSep "\n" (lib.mapAttrsToList (n: v: "${lib.head v.config.hostEnv.ips.main.ip4} ${n}") nodes))
-            (builtins.concatStringsSep "\n" (lib.mapAttrsToList (n: v: "${v.config.hostEnv.wireguard.ip} wg-${n}") (lib.filterAttrs (n: v: v.config.hostEnv.wireguard.enable) nodes)))
+            (lib.mkIf config.hostEnv.wireguard.enable (builtins.concatStringsSep "\n" (lib.mapAttrsToList (n: v: "${v.config.hostEnv.wireguard.ip} wg-${n}") (lib.filterAttrs (n: v: v.config.hostEnv.wireguard.enable) nodes))))
           ];
 
           networking.firewall.allowedUDPPorts = lib.mkIf config.hostEnv.wireguard.enable [ config.hostEnv.wireguard.port ];