summaryrefslogtreecommitdiff
path: root/os/srv/sops.nix
diff options
context:
space:
mode:
Diffstat (limited to 'os/srv/sops.nix')
-rw-r--r--os/srv/sops.nix9
1 files changed, 2 insertions, 7 deletions
diff --git a/os/srv/sops.nix b/os/srv/sops.nix
index fecb9df..36ab9ef 100644
--- a/os/srv/sops.nix
+++ b/os/srv/sops.nix
@@ -18,7 +18,7 @@ in
};
config = lib.mkIf cfg.enable {
sops = {
- defaultSopsFile = ../../secrets/common.yaml;
+ defaultSopsFile = ../../secrets.yaml;
defaultSopsFormat = "yaml";
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
@@ -26,12 +26,7 @@ in
"syncthing/gui_password".owner = username;
"syncthing/encryption/game-saves".owner = username;
"syncthing/encryption/keepass".owner = username;
- "vpn/warp_private_key" = {
- owner = "root";
- group = "networkmanager";
- mode = "0400";
- restartUnits = [ "NetworkManager.service" ];
- };
+ "vpn/warp_private_key".owner = "root";
"obs/websocket_password".owner = username;
root_password.neededForUsers = true;
user_password.neededForUsers = true;