Julia/nix-dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Sops, add user secret management

Browse source
This commit is contained in:
Julia Lange 2024-11-07 14:58:37 -08:00
parent 5c256edcb3
commit 5186992f88
Signed by: Julia
SSH key fingerprint: SHA256:KI8YxpkPRbnDRkXPgCuQCVz181++Vy7NAvmQj8alOhM
3 changed files with 24 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

28
nixosModules/services/sops-nix/default.nix
View file

@ -1,18 +1,32 @@
{ inputs, config, pkgs, lib, ... }:
let rootPath = ./.; in
{
options = {
sops-nix.enable = lib.mkEnableOption "Enables nix-sops for secret management";
options.sops-nix = let
externalPath = lib.mkOptionType {
name = "externalPath";
check = x: !lib.path.hasStorePathPrefix (/. + x);
merge = lib.mergeEqualOption;
};
in {
enable = lib.mkEnableOption "Enables nix-sops for secret management";
keyFile = lib.mkOption {
description = "A key file to unlock your secrets file";
type = lib.types.nullOr externalPath;
};
sopsFile = lib.mkOption {
description = "The path to your secrets file";
type = lib.types.path;
};
secrets = lib.mkOption { default = {}; };
};
imports = [ inputs.sops-nix.nixosModules.sops ];
config = lib.mkIf config.sops-nix.enable {
sops = {
defaultSopsFile = rootPath + "secrets.yaml";
defaultSopsFormat = "yaml";
age.keyFile = "/home/" + config.user.name + ".config/sops/age/keys.txt";
defaultSopsFile = config.sops-nix.sopsFile;
age.keyFile = config.sops-nix.keyFile;
secrets = config.sops-nix.secrets;
};
environment.systemPackages = with pkgs; [
sops