liv/nixos-config
1
0
Fork 0
mirror of https://github.com/Ahwxorg/nixos-config.git synced 2025-12-04 15:00:13 +01:00
Code Issues 1 Projects Releases Packages Wiki Activity Actions

feat: write cursed function so that secrets are host-based

Browse source
This commit is contained in:
Ahwx 2025-07-30 13:24:21 +02:00
parent 83ea9f4916
commit fdc031ea4d
1 changed files with 15 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

17
modules/core/sops.nix
View file

@ -2,18 +2,29 @@
pkgs,
inputs,
username,
host,
...
}:
{
imports = [ inputs.sops-nix.nixosModules.sops ];
sops = {
defaultSopsFile = ../../secrets/secrets.yaml;
defaultSopsFile = ../../secrets/${host}/secrets.yaml;
defaultSopsFormat = "yaml";
age.keyFile = "/home/${username}/.config/sops/age/keys.txt";
secrets = {
secrets =
if (host == "violet") then
{
"systemMailerPassword" = { };
};
"forgejoWorkerSecret" = { };
"matrixRegistrationSecret" = { };
}
else if (host == "sakura") then
{
"systemMailerPassword" = { };
}
else
{ };
};
environment.systemPackages = with pkgs; [