20 lines
671 B
Nix
20 lines
671 B
Nix
{ lib, config, ... }:
|
|
{
|
|
sops = {
|
|
defaultSopsFile = lib.snowfall.fs.get-file "secrets/secrets.yaml";
|
|
age.sshKeyPaths = [ "/persist/home/rafiq/.ssh/id_ed25519" ];
|
|
secrets = {
|
|
"keys/tailscale" = { };
|
|
"keys/gemini" = { };
|
|
"keys/cvt-jira" = { };
|
|
"misc/cvt-jira-link" = { };
|
|
"rafiq/hashedPassword".neededForUsers = true;
|
|
};
|
|
};
|
|
environment.shellInit = # sh
|
|
''
|
|
export GEMINI_API_KEY=$(sudo cat ${config.sops.secrets."keys/gemini".path})
|
|
export CVT_JIRA_KEY=$(sudo cat ${config.sops.secrets."keys/cvt-jira".path})
|
|
export CVT_JIRA_LINK=$(sudo cat ${config.sops.secrets."misc/cvt-jira-link".path})
|
|
'';
|
|
}
|