29 lines
729 B
Nix
29 lines
729 B
Nix
{ inputs, den, ... }: {
|
|
den.aspects.secrets.nixos = { ... }: {
|
|
imports = [ inputs.sops-nix.nixosModules.sops ];
|
|
|
|
sops = {
|
|
defaultSopsFile = ../secrets/secrets.yaml;
|
|
|
|
# NOTE: This thing gave me a huge headache to setup.
|
|
# If you are ME from future, don't forget to place
|
|
# your age keys here!
|
|
age.keyFile = "/etc/sops/age/keys.txt";
|
|
|
|
# Define secrets to be used.
|
|
secrets = {
|
|
# Literally the user password.
|
|
"user-password" = {
|
|
neededForUsers = true;
|
|
};
|
|
|
|
# SSH private key.
|
|
"ssh-private-key" = {
|
|
path = "/run/secrets/ssh-private-key";
|
|
owner = "zoty";
|
|
mode = "0400";
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|