nixos-config/modules/core/sops.nix

{
  pkgs,
  inputs,
  username,
  host,
  config,
  ...
}:
{
  imports = [ inputs.sops-nix.nixosModules.sops ];

  sops = {
    defaultSopsFile = ../../secrets/${host}/secrets.yaml;
    defaultSopsFormat = "yaml";
    age.keyFile = "/home/${username}/.config/sops/age/keys.txt";
    secrets =
      if (host == "violet") then
        {
          "systemMailerPassword" = { };
          "forgejoWorkerSecret" = { };
          "minioRootCredentials" = { };
          "atticdEnvironment" = { };
          "matrixRegistrationSecret" = {
            owner = "matrix-synapse";
          };
          "smbLoginDetails" = { };
          "syncplay" = { };
          "funkwhaleDjangoSecret" = { };
        }
      else if (host == "sakura") then
        {
          "systemMailerPassword" = { };
          "dandelionSyncthingId" = { };
          "sakuraSyncthingId" = { };
          "homeExternalIPv4" = { };
        }
      else if (host == "dandelion") then
        {
          "systemMailerPassword" = { };
          "dandelionSyncthingId" = { };
          "sakuraSyncthingId" = { };
        }
      else
        { };
  };

  environment.systemPackages = with pkgs; [
    sops
  ];
}