summaryrefslogtreecommitdiff
path: root/os/srv/sops.nix
diff options
context:
space:
mode:
Diffstat (limited to 'os/srv/sops.nix')
-rw-r--r--os/srv/sops.nix36
1 files changed, 0 insertions, 36 deletions
diff --git a/os/srv/sops.nix b/os/srv/sops.nix
deleted file mode 100644
index 3ca2d16..0000000
--- a/os/srv/sops.nix
+++ /dev/null
@@ -1,36 +0,0 @@
-{
- config,
- lib,
- pkgs,
- inputs,
- username,
- ...
-}:
-let
- cfg = config.os.srv.sops;
-in
-{
- imports = [ inputs.sops-nix.nixosModules.sops ];
-
- options.os.srv.sops.enable = lib.mkEnableOption "enables sops-nix";
- config = lib.mkIf cfg.enable {
- sops = {
- defaultSopsFile = ../../secrets/common.yaml;
- defaultSopsFormat = "yaml";
- age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
-
- secrets = {
- # "syncthing/gui_password".owner = username;
- "syncthing/encryption/keepass".owner = username;
- "syncthing/encryption/sync".owner = username;
- "obs/websocket_password".owner = username;
- };
- };
-
- environment.systemPackages = with pkgs; [
- sops
- age
- ssh-to-age
- ];
- };
-}