In AES-GCM a 12-byte nonce is stored next to the ciphertext. Reusing one with the same key breaks both confidentiality and authenticity. Generate it with crypto/rand.