sops: fix config for darwin

This commit is contained in:
Trolli Schmittlauch 2026-04-06 22:36:50 +02:00
parent 281ca7ed03
commit 76d79356c3
3 changed files with 36 additions and 9 deletions

View file

@ -21,7 +21,6 @@ in
sops = {
secrets."nix/access-tokens" = {
owner = "root";
group = "users";
mode = "0440";
sopsFile = ./secrets.yaml;
};
@ -30,7 +29,8 @@ in
access-tokens = ${config.sops.placeholder."nix/access-tokens"}
'';
owner = "root";
group = "users";
# secret needs to be readable by users (nix client) as well as nix-daemon (running as root)
group = if pkgs.stdenv.isDarwin then "localaccounts" else "users";
mode = "0440";
};
};