nix-config/configs/nixos/secrets.nix

25 lines
498 B
Nix
Raw Normal View History

2024-06-03 23:38:29 +02:00
{
inputs,
config,
lib,
pkgs,
...
}: let
secretsDirectory = builtins.toString (inputs.nix-secrets or "");
2024-06-03 23:38:29 +02:00
in {
imports = [
inputs.sops-nix.nixosModules.sops
];
config = lib.mkIf (inputs ? nix-secrets) {
sops = {
defaultSopsFile = "${secretsDirectory}/common.yaml";
validateSopsFiles = false;
age = {
sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
keyFile = "/var/lib/sops-nix/key.txt";
generateKey = true;
};
2024-06-04 18:00:43 +02:00
};
2024-06-03 23:38:29 +02:00
};
}