imterah/nix-infra
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

fix: Fix sops

Browse source
This commit is contained in:
Tera << 8 2025-05-05 10:43:13 -04:00
parent 1c1d6054b0
commit 70a5b89528
Signed by: imterah
GPG key ID: 8FA7DD57BA6CEA37
7 changed files with 34 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

23
system/sops.nix
View file

@ -1,12 +1,21 @@
{inputs, ...}: {
{inputs, ...}; let
secretspath = builtins.toString inputs.nix-secrets;
in
{
imports = [
inputs.sops-nix.nixosModules.sops
];
sops.defaultSopsFile = "${../secrets/secrets.yaml}";
sops.validateSopsFiles = false;
sops.defaultSopsFormat = "yaml";
sops.age.keyFile = "/persist/var/lib/sops-nix/key.txt";
sops.age.sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
sops.age.generateKey = true;
sops = {
defaultSopsFile = "${secretspath}/secrets.yaml";
age = {
keyFile = "/var/lib/sops-nix/key.txt";
generateKey = false;
};
secrets = {
tera_passwd = {
neededForUsers = true;
};
};
};
}