29 lines
510 B
Nix
29 lines
510 B
Nix
{ config, pkgs, inputs, ... }:
|
|
|
|
let
|
|
|
|
isEd25519 = k: k.type == "ed25519";
|
|
getKeyPath = k: k.path;
|
|
keys = builtins.filter isEd25519 config.services.openssh.hostKeys;
|
|
|
|
in
|
|
{
|
|
imports = [
|
|
inputs.sops-nix.nixosModules.sops
|
|
];
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
sops
|
|
];
|
|
|
|
sops = {
|
|
defaultSopsFile = ../../../secrets.yaml;
|
|
|
|
gnupg.home = config.homePath + "/.gnupg";
|
|
gnupg.sshKeyPaths = [];
|
|
|
|
secrets = {
|
|
freyanetWg = {};
|
|
};
|
|
};
|
|
}
|