nix-config/modules/secrets/default.nix

{ inputs, lib, options, ... }:

with lib;
{
  imports = [
    inputs.agenix.nixosModules.age
  ];

  config.age = {
    secrets =
      let
        toName = removeSuffix ".age";
        toSecret = name: _: {
          file = ./. + "/${name}";
          owner = mkDefault "root";
        };
        convertSecrets = n: v: nameValuePair (toName n) (toSecret n v);
        secrets = import ./secrets.nix;
      in
      lib.mapAttrs' convertSecrets secrets;

    sshKeyPaths = options.age.sshKeyPaths.default ++ [
      # FIXME: hard-coded path, could be inexistent
      "/home/ambroisie/.ssh/id_ed25519"
    ];
  };
}