summaryrefslogtreecommitdiff
path: root/os/srv/sops.nix
diff options
context:
space:
mode:
authoradikro <adikro@disroot.org>2026-06-12 00:53:25 +0200
committeradikro <adikro@disroot.org>2026-06-12 00:53:25 +0200
commit1eba5398fd09f98bd11cbf8c3b80f20bb9ce1f2d (patch)
treec103e3d6ee0e3b2a1e3ac8fd525c08eb7d37e938 /os/srv/sops.nix
parent66eff7dbb117ccf9cbf743036f058d5dcb0a78e6 (diff)
microvm and dns stuff
Diffstat (limited to 'os/srv/sops.nix')
-rw-r--r--os/srv/sops.nix9
1 files changed, 2 insertions, 7 deletions
diff --git a/os/srv/sops.nix b/os/srv/sops.nix
index 1b27042..3ca2d16 100644
--- a/os/srv/sops.nix
+++ b/os/srv/sops.nix
@@ -15,20 +15,15 @@ in
options.os.srv.sops.enable = lib.mkEnableOption "enables sops-nix";
config = lib.mkIf cfg.enable {
sops = {
- defaultSopsFile = ../../secrets.yaml;
+ defaultSopsFile = ../../secrets/common.yaml;
defaultSopsFormat = "yaml";
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
secrets = {
- "syncthing/gui_password".owner = username;
+ # "syncthing/gui_password".owner = username;
"syncthing/encryption/keepass".owner = username;
"syncthing/encryption/sync".owner = username;
"obs/websocket_password".owner = username;
- "yggdrasil-private-key" = {
- owner = "root";
- group = "wheel";
- mode = "0440";
- };
};
};