From 6226c983ef04d55dc85661daac68aa19a5d815bd Mon Sep 17 00:00:00 2001
From: sommerfeld <sommerfeld@sommerfeld.dev>
Date: Tue, 21 Apr 2026 01:23:47 +0100
Subject: feat(etc/.ignore): exclude wireguard .netdev (contains PrivateKey)

---
 etc/.ignore | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/etc/.ignore b/etc/.ignore
index 5be0121..2e2885a 100644
--- a/etc/.ignore
+++ b/etc/.ignore
@@ -41,3 +41,8 @@
 
 # sbctl signed-boot state (keys live here; never commit)
 /etc/secureboot/*
+
+# WireGuard peer configs contain PrivateKey= — keep local only.
+# To version these, template PrivateKey via `pass` at chezmoi apply time.
+/etc/systemd/network/99-hodor.netdev
+/etc/systemd/network/99-mandibles.netdev
-- 
cgit v1.2.3-70-g09d2