nix/modules/home/secrets.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

{ config, ... }:
{
  defaultSopsFile = ../../secrets/secrets.yaml;
  age = {
    keyFile = "/home/${config.vars.userName}/.ssh/keys.txt";
  };
  secrets.mail = {
    format = "yaml";
    path = "${config.sops.defaultSymlinkPath}/mail";
  };
  secrets.digikey = {
    format = "yaml";
    path = "${config.sops.defaultSymlinkPath}/digikey";
  };

  defaultSymlinkPath = "/run/user/1000/secrets";
  defaultSecretsMountPoint = "/run/user/1000/secrets.d";
}