schmittlauch/nixconfigs
2
0
Fork 0
Code Issues 2 Pull requests Releases Wiki Activity

sops: first secret integration (nix-settings)

Browse source
This commit is contained in:
Trolli Schmittlauch 2026-04-06 00:14:48 +02:00
parent e8e402e9b7
commit 8914fa79ed
10 changed files with 86 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

11
common/sops.nix Normal file
View file

@ -0,0 +1,11 @@
{ lib, config, ... }:
let
inputs = config.inputInjection.flake-inputs;
in
{
sops = {
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
defaultSopsFile = lib.mkDefault toString (./. + "/hosts/${config.networking.hostname}/secrets.ini");
defaultSopsFormat = "yaml"; # is the default. ini had some template rendering issues in practice
};
}