Gabe/nix-config
1
0
Fork 0
Code Issues 12 Pull requests Projects Releases Packages Wiki Activity

made nix-secrets input comment-out-able.

Browse source
This commit is contained in:
Gabe Venberg 2024-06-12 14:40:04 -05:00
parent f27b5ac056
commit 6147ddb903
10 changed files with 51 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

17
configs/nixos/secrets.nix
View file

@ -5,17 +5,20 @@
pkgs,
...
}: let
secretsDirectory = builtins.toString inputs.nix-secrets;
secretsDirectory = builtins.toString (inputs.nix-secrets or "");
in {
imports = [
inputs.sops-nix.nixosModules.sops
];
sops = {
validateSopsFiles = false;
age = {
sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
keyFile = "/var/lib/sops-nix/key.txt";
generateKey = true;
config = lib.mkIf (inputs ? nix-secrets) {
sops = {
defaultSopsFile = "${secretsDirectory}/common.yaml";
validateSopsFiles = false;
age = {
sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
keyFile = "/var/lib/sops-nix/key.txt";
generateKey = true;
};
};
};
}