snowfield/modules/secrets/default.nix

20 lines
373 B
Nix

{ config, lib, ... }:
let
cfg = config.luj.secrets;
in
with lib;
{
options.luj.secrets = {
enable = mkEnableOption "Create secrets";
};
config = mkIf cfg.enable {
age.secrets.git-gpg-private-key = {
file = ../../secrets/git-gpg-private-key.age;
owner = "julien";
mode = "0440";
group = config.users.groups.keys.name;
};
};
}