snowfield/modules/secrets/default.nix
2022-04-01 10:36:27 +02:00

31 lines
626 B
Nix

{ pkgs, config, lib, inputs, ... }:
let
cfg = config.luj.secrets;
in
with lib;
{
options.luj.secrets = {
enable = mkEnableOption "Create secrets";
};
config = mkIf cfg.enable
{
sops.secrets.ens-mail-passwd = {
owner = "julien";
path = "/home/julien/.config/ens-mail-passwd";
};
sops.secrets.sendinblue-mail-passwd = { };
sops.secrets.git-gpg-private-key = {
owner = "julien";
mode = "0440";
group = config.users.groups.keys.name;
sopsFile = ../secrets/git-gpg-private-key;
};
nix.gcRoots = [ inputs.sops-nix ];
};
}