26 lines
843 B
Nix

{ config, lib, pkgs, user, inputs, ... }:
let cfg = config.modules.system.secrets;
in {
options.modules.system.secrets.enable = lib.mkEnableOption "secrets";
config = lib.mkIf cfg.enable {
environment.systemPackages = [
inputs.agenix.packages.x86_64-linux.default
];
# git secrets
age.secrets."git/github_personal" = {
file = ../../age-secrets/git/github_personal.age;
owner = "${user}";
group = "users";
};
# wireguard secrets
age.secrets."wireguard/kestrel".file = ../../age-secrets/wireguard/kestrel.age;
#age.secrets."wireguard/bulwark".file = ../../age-secrets/wireguard/bulwark.age;
#age.secrets."wireguard/adjudicator".file = ../../age-secrets/wireguard/adjudicator.age;
#age.secrets."wireguard/torus".file = ../../age-secrets/wireguard/torus.age;
};
}