diff --git a/provision/modules/system/secrets.nix b/provision/modules/system/secrets.nix index 4648b3ce..f9a3b1ab 100644 --- a/provision/modules/system/secrets.nix +++ b/provision/modules/system/secrets.nix @@ -5,7 +5,10 @@ in { options.modules.system.secrets.enable = lib.mkEnableOption "secrets"; config = lib.mkIf cfg.enable { - sops = { + + sops = let + ncHost = (if config.networking.hostName == "torus" then "nextcloud" else "${user}"); + in { defaultSopsFile = ../../secrets/secrets.yaml; defaultSopsFormat = "yaml"; age.keyFile = "/home/${user}/.config/sops/age/keys.txt"; @@ -14,7 +17,7 @@ in { secrets."keys/github_personal" = { owner = "${user}"; }; # Nextcloud password - secrets."nextcloud/password" = { owner = "nextcloud"; }; + secrets."nextcloud/password" = { owner = "${ncHost}"; }; # Wireguard secrets secrets."wireguard/kestrel" = { owner = "${user}"; };