From 66eff7dbb117ccf9cbf743036f058d5dcb0a78e6 Mon Sep 17 00:00:00 2001 From: adikro Date: Sun, 31 May 2026 23:41:20 +0200 Subject: updated, revised some modules, cleaned up secrets management --- os/srv/sops.nix | 11 +---------- 1 file changed, 1 insertion(+), 10 deletions(-) (limited to 'os/srv/sops.nix') diff --git a/os/srv/sops.nix b/os/srv/sops.nix index 20e1891..1b27042 100644 --- a/os/srv/sops.nix +++ b/os/srv/sops.nix @@ -12,10 +12,7 @@ in { imports = [ inputs.sops-nix.nixosModules.sops ]; - options.os.srv.sops = { - enable = lib.mkEnableOption "enables sops-nix"; - diskEncryption = lib.mkEnableOption "enables initrd decryption key (LUKS)"; - }; + options.os.srv.sops.enable = lib.mkEnableOption "enables sops-nix"; config = lib.mkIf cfg.enable { sops = { defaultSopsFile = ../../secrets.yaml; @@ -24,20 +21,14 @@ in secrets = { "syncthing/gui_password".owner = username; - "syncthing/encryption/openmw-config".owner = username; - "syncthing/encryption/openmw-mods".owner = username; - "syncthing/encryption/game-saves".owner = username; "syncthing/encryption/keepass".owner = username; "syncthing/encryption/sync".owner = username; - "vpn/warp_private_key".owner = "root"; "obs/websocket_password".owner = username; "yggdrasil-private-key" = { owner = "root"; group = "wheel"; mode = "0440"; }; - root_password.neededForUsers = true; - user_password.neededForUsers = true; }; }; -- cgit v1.3