mirror of
https://github.com/starr-dusT/dotfiles.git
synced 2024-10-06 04:16:16 -07:00
27 lines
802 B
Nix
27 lines
802 B
Nix
{ config, lib, pkgs, user, ... }:
|
|
|
|
let cfg = config.modules.system.secrets;
|
|
in {
|
|
options.modules.system.secrets.enable = lib.mkEnableOption "secrets";
|
|
config = lib.mkIf cfg.enable {
|
|
|
|
sops = {
|
|
defaultSopsFile = ../../secrets/secrets.yaml;
|
|
defaultSopsFormat = "yaml";
|
|
age.keyFile = "/home/${user}/.config/sops/age/keys.txt";
|
|
|
|
# Github secrets
|
|
secrets."github/starr-dusT" = { owner = "${user}"; };
|
|
|
|
# Wireguard secrets
|
|
secrets."wireguard/kestrel" = { owner = "${user}"; };
|
|
secrets."wireguard/bulwark" = { owner = "${user}"; };
|
|
secrets."wireguard/adjudicator" = { owner = "${user}"; };
|
|
secrets."wireguard/torus" = { owner = "${user}"; };
|
|
|
|
# Homelab secrets
|
|
secrets."homelab/tstarr" = { owner = "${user}"; };
|
|
};
|
|
};
|
|
}
|