liv/nixos-config
1
0
Fork 0
mirror of https://github.com/Ahwxorg/nixos-config.git synced 2025-12-04 15:00:13 +01:00
Code Issues 1 Projects Releases Packages Wiki Activity Actions

feat: write cursed function so that secrets are host-based

Browse source
This commit is contained in:
Ahwx 2025-07-30 13:24:21 +02:00
parent 83ea9f4916
commit fdc031ea4d
1 changed files with 15 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

19
modules/core/sops.nix
View file

@ -2,18 +2,29 @@
pkgs, pkgs,
inputs, inputs,
username, username,
host,
... ...
}: }:
{ {
imports = [ inputs.sops-nix.nixosModules.sops ]; imports = [ inputs.sops-nix.nixosModules.sops ];
sops = { sops = {
defaultSopsFile = ../../secrets/secrets.yaml; defaultSopsFile = ../../secrets/${host}/secrets.yaml;
defaultSopsFormat = "yaml"; defaultSopsFormat = "yaml";
age.keyFile = "/home/${username}/.config/sops/age/keys.txt"; age.keyFile = "/home/${username}/.config/sops/age/keys.txt";
secrets = { secrets =
"systemMailerPassword" = { }; if (host == "violet") then
}; {
"systemMailerPassword" = { };
"forgejoWorkerSecret" = { };
"matrixRegistrationSecret" = { };
}
else if (host == "sakura") then
{
"systemMailerPassword" = { };
}
else
{ };
}; };
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [