nix/hosts/zaphod/secret-files.nix

{
  config.age.secrets = {
    wg-privkey = {
      file = ./secrets/wg-privkey.age;
      path = "/run/agenix/wg-privkey";
    };
  };
}