31 lines
584 B
Nix
31 lines
584 B
Nix
|
{ config, pkgs, inputs, ... }:
|
||
|
|
|
||
|
|
let
|
||
|
|
|
||
|
|
isEd25519 = k: k.type == "ed25519";
|
||
|
|
getKeyPath = k: k.path;
|
||
|
|
keys = builtins.filter isEd25519 config.services.openssh.hostKeys;
|
||
|
|
|
||
|
|
in
|
||
|
|
{
|
||
|
|
imports = [
|
||
|
|
inputs.sops-nix.nixosModules.sops
|
||
|
|
];
|
||
|
|
|
||
|
|
environment.systemPackages = with pkgs; [
|
||
|
|
sops
|
||
|
|
];
|
||
|
|
|
||
|
|
sops = {
|
||
|
|
defaultSopsFile = config.dotfilesPath + "/hosts/${config.hostName}/secrets.yaml";
|
||
|
|
validateSopsFiles = false;
|
||
|
|
|
||
|
|
gnupg.home = config.homePath + "/.gnupg";
|
||
|
|
gnupg.sshKeyPaths = [];
|
||
|
|
|
||
|
|
secrets = {
|
||
|
|
freyanetWg = {};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|