sops

2025-03-02 18:39:35 +02:00
parent f3c6a271dd
commit 0a710faa55
6 changed files with 102 additions and 1 deletions
--- a/hosts/dunamis/users/user/sops.nix
+++ b/hosts/dunamis/users/user/sops.nix
@ -0,0 +1,20 @@
+{inputs, ...}: let
+  secretsPath = builtins.toString inputs.mysecrets;
+in {
+  imports = with inputs; [
+    sops-nix.homeManagerModules.sops
+  ];
+
+  sops = {
+    age.keyFile = "/var/lib/sops-nix/key.txt";
+
+    defaultSopsFile = "${secretsPath}/secrets.yaml";
+    validateSopsFiles = false;
+
+    secrets = {
+      "ssh/private/dunamis-user" = {
+        path = "/home/user/.ssh/id_ed25519";
+      };
+    };
+  };
+}