demiurge: add wireguard-wg1 dependency on age-secret

1 files changed, 12 insertions, 1 deletions

diff --git a/epistemia/services/age-secret.scm b/epistemia/services/age-secret.scm
index 08926ec..70d2b9f 100644
--- a/epistemia/services/age-secret.scm
+++ b/epistemia/services/age-secret.scm
@@ -2,6 +2,7 @@
   #:use-module (guix gexp)
   #:use-module (guix records)
   #:use-module (gnu services)
+  #:use-module (gnu services shepherd)
   #:use-module (gnu packages golang-crypto)
   #:use-module (ice-9 match)
   #:export (age-secret-service-type
@@ -75,12 +76,22 @@
                              (age-secret-mode s)))
                      secrets)))))))
 
+(define (age-secret-shepherd-service config)
+  (list (shepherd-service
+         (provision '(age-secret))
+         (requirement '())
+         (one-shot? #t)
+         (start #~(lambda () #t))
+         (documentation "Age secret decryption marker service."))))
+
 (define age-secret-service-type
   (service-type
     (name 'age-secret)
     (extensions
      (list (service-extension activation-service-type
-                              age-secret-activation)))
+                              age-secret-activation)
+           (service-extension shepherd-root-service-type
+                              age-secret-shepherd-service)))
     (description
      "Decrypts age-encrypted files at boot using host keys and assigns ownership.")
     (default-value (age-secret-configuration))))