Separate secrets and configuration

[cab404]

Separate secrets and configuration

Currently
both private keys and configuration reside in a single wg-bond.json
file. You can't version control it, because it contains all the private
keys, but sometimes it's necessary (e.g for saving them alongside nixops
configs).

Not yet sure how to do this one though. Keeping two config files is cumbersome (maybe use config directory? (you can generate .gitignore automatically there)).

orig: https://gitlab.com/cab404/wg-bond/-/issues/30

[cab404]

I guess this can be almost deemed complete, as wg-bond secret is already in master, and nix export supports providing directory for secrets.

• Add a way to specify secrets location (in config/peer config)

[cab404]

Now there's #19, we can think of evicting all of the secret material out of the config, and using a single derivation seed.