summaryrefslogtreecommitdiff
path: root/os/srv/sops.nix
diff options
context:
space:
mode:
Diffstat (limited to 'os/srv/sops.nix')
-rw-r--r--os/srv/sops.nix9
1 files changed, 2 insertions, 7 deletions
diff --git a/os/srv/sops.nix b/os/srv/sops.nix
index 1b27042..3ca2d16 100644
--- a/os/srv/sops.nix
+++ b/os/srv/sops.nix
@@ -15,20 +15,15 @@ in
options.os.srv.sops.enable = lib.mkEnableOption "enables sops-nix";
config = lib.mkIf cfg.enable {
sops = {
- defaultSopsFile = ../../secrets.yaml;
+ defaultSopsFile = ../../secrets/common.yaml;
defaultSopsFormat = "yaml";
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
secrets = {
- "syncthing/gui_password".owner = username;
+ # "syncthing/gui_password".owner = username;
"syncthing/encryption/keepass".owner = username;
"syncthing/encryption/sync".owner = username;
"obs/websocket_password".owner = username;
- "yggdrasil-private-key" = {
- owner = "root";
- group = "wheel";
- mode = "0440";
- };
};
};