nixos/modules/sops.nix

23 lines
446 B
Nix

{sops-nix, ...}: {
pkgs,
settings,
self,
config,
lib,
...
}: {
imports = [
sops-nix.nixosModules.sops
];
environment.systemPackages = [
pkgs.sops
];
sops = {
defaultSopsFile = "${self}/systems/${config.networking.hostName}/secrets.yaml";
age = {
sshKeyPaths = lib.mkForce ["/home/${settings.username}/.ssh/id_ed25519"];
keyFile = "/etc/sops/age/keys.txt";
generateKey = true;
};
};
}