diff --git a/wg.mk b/wg.mk
index d350b04..6bc7f62 100644
--- a/wg.mk
+++ b/wg.mk
@@ -33,3 +33,4 @@ ignored += ansible/files/wireguard/wg0.conf
 ansible/files/wireguard/wg0.conf: wireguard/wg_peers.txt | ansible/files/wireguard/server_head
 	cd ansible && ansible-vault view files/wireguard/server_head > files/wireguard/wg0.conf
 	cat $< >> $@
+	cd ansible && ansible-vault encrypt files/wireguard/wg0.conf