rrvsh/pantheon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(modules/secrets): init sops-nix

Browse source
This commit is contained in:
Mohammad Rafiq 2025-05-18 22:57:16 +08:00
parent 1c32074f69
commit 7a18d65b0c
No known key found for this signature in database
7 changed files with 61 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
modules/nixos/system/default.nix
View file

@ -5,6 +5,7 @@
./users.nix
./localisation.nix
./nix-config.nix
./secrets.nix
];
options.system = {

10
modules/nixos/system/secrets.nix Normal file
View file

@ -0,0 +1,10 @@
{ config, lib, ... }:
{
sops = {
defaultSopsFile = lib.snowfall.fs.get-file "secrets/secrets.yaml";
age.sshKeyPaths = ["/persist/home/rafiq/.ssh/id_ed25519"];
secrets ={
"rafiq/hashedPassword".neededForUsers = true;
};
};
}