sops: first secret integration (nix-settings)

This commit is contained in:
Trolli Schmittlauch 2026-04-06 00:14:48 +02:00
parent e8e402e9b7
commit 8914fa79ed
10 changed files with 86 additions and 5 deletions

13
darwin/sops.nix Normal file
View file

@ -0,0 +1,13 @@
{
lib,
config,
pkgs,
...
}:
{
sops = {
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
defaultSopsFile = lib.mkDefault ./secrets.yaml;
defaultSopsFormat = "yaml"; # is the default. ini had some template rendering issues in practice
};
}