nix-config/secrets/default.nix

28 lines
617 B
Nix
Raw Normal View History

{ inputs, lib, options, ... }:
2021-02-14 14:13:31 +01:00
with lib;
2021-09-25 16:36:57 +02:00
{
2021-09-25 13:31:43 +02:00
imports = [
inputs.agenix.nixosModules.age
];
config.age = {
secrets =
let
toName = removeSuffix ".age";
toSecret = name: _: {
file = ./. + "/${name}";
owner = mkDefault "root";
};
convertSecrets = n: v: nameValuePair (toName n) (toSecret n v);
secrets = import ./secrets.nix;
in
lib.mapAttrs' convertSecrets secrets;
sshKeyPaths = options.age.sshKeyPaths.default ++ [
# FIXME: hard-coded path, could be inexistent
"/home/ambroisie/.ssh/id_ed25519"
];
};
2021-02-14 14:13:31 +01:00
}