25 lines
590 B
Nix
25 lines
590 B
Nix
{inputs, ...}: {
|
|
flake.nixosModules.sops = {config, ...}: {
|
|
imports = [inputs.sops-nix.nixosModules.sops];
|
|
|
|
sops = {
|
|
age.keyFile = "/etc/sops/age/keys.txt";
|
|
defaultSopsFile = ./secrets.yaml;
|
|
|
|
secrets = {
|
|
gotify-desktop-key = {
|
|
# Make readable
|
|
mode = "0444";
|
|
};
|
|
};
|
|
templates = {
|
|
"gotify-desktop-key".content = config.sops.placeholder.gotify-desktop-key;
|
|
};
|
|
};
|
|
# Make the secrets dir readable to normal users
|
|
systemd.tmpfiles.rules = [
|
|
"d /run/secrets 0755 root root -"
|
|
];
|
|
};
|
|
}
|