diff options
| author | adikro <adikro@disroot.org> | 2026-06-12 00:53:25 +0200 |
|---|---|---|
| committer | adikro <adikro@disroot.org> | 2026-06-12 00:53:25 +0200 |
| commit | 1eba5398fd09f98bd11cbf8c3b80f20bb9ce1f2d (patch) | |
| tree | c103e3d6ee0e3b2a1e3ac8fd525c08eb7d37e938 /os/srv/sops.nix | |
| parent | 66eff7dbb117ccf9cbf743036f058d5dcb0a78e6 (diff) | |
microvm and dns stuff
Diffstat (limited to 'os/srv/sops.nix')
| -rw-r--r-- | os/srv/sops.nix | 9 |
1 files changed, 2 insertions, 7 deletions
diff --git a/os/srv/sops.nix b/os/srv/sops.nix index 1b27042..3ca2d16 100644 --- a/os/srv/sops.nix +++ b/os/srv/sops.nix @@ -15,20 +15,15 @@ in options.os.srv.sops.enable = lib.mkEnableOption "enables sops-nix"; config = lib.mkIf cfg.enable { sops = { - defaultSopsFile = ../../secrets.yaml; + defaultSopsFile = ../../secrets/common.yaml; defaultSopsFormat = "yaml"; age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ]; secrets = { - "syncthing/gui_password".owner = username; + # "syncthing/gui_password".owner = username; "syncthing/encryption/keepass".owner = username; "syncthing/encryption/sync".owner = username; "obs/websocket_password".owner = username; - "yggdrasil-private-key" = { - owner = "root"; - group = "wheel"; - mode = "0440"; - }; }; }; |
