Separate secrets and configuration

[cab404]

Separate secrets and configuration

Currently both private keys and configuration reside in a single wg-bond.json file. You can't version control it, because it contains all the private keys, but sometimes it's necessary (e.g for saving them alongside nixops configs).

Not yet sure how to do this one though. Keeping two config files is cumbersome (maybe use config directory? (you can generate .gitignore automatically there)).

orig: https://gitlab.com/cab404/wg-bond/-/issues/30