diff --git a/machines/asus-gl553vd/default.nix b/machines/asus-gl553vd/default.nix
index aa0390a..24b6652 100644
--- a/machines/asus-gl553vd/default.nix
+++ b/machines/asus-gl553vd/default.nix
@@ -70,9 +70,12 @@
   local.nix.enableMyRegistry = true;
 
   # Wireguard client
-  age.secrets.wireguard-asus-gl553vd-private.file = ../../secrets/wireguard-asus-gl553vd-private.age;
+  age.secrets.wireguard-asus-gl553vd-private = {
+    file = ../../secrets/wireguard-asus-gl553vd-private.age;
+    mode = "0400";
+  };
   local.wireguard = {
-    enable = false;
+    enable = true;
     ip = "10.100.0.3/24";
     privateKeyFile = config.age.secrets.wireguard-asus-gl553vd-private.path;
   };