diff --git a/home/default.nix b/home/default.nix index 2668156..fee7a8b 100644 --- a/home/default.nix +++ b/home/default.nix @@ -23,7 +23,6 @@ ./packages.nix ./pager.nix ./power-alert.nix - ./secrets # Home-manager specific secrets ./ssh.nix ./terminal ./tmux.nix diff --git a/home/secrets/.gitattributes b/home/secrets/.gitattributes deleted file mode 100644 index a741d4d..0000000 --- a/home/secrets/.gitattributes +++ /dev/null @@ -1,3 +0,0 @@ -* filter=git-crypt diff=git-crypt -.gitattributes !filter !diff -/default.nix !filter !diff diff --git a/home/secrets/canary b/home/secrets/canary deleted file mode 100644 index e910ea3..0000000 Binary files a/home/secrets/canary and /dev/null differ diff --git a/home/secrets/default.nix b/home/secrets/default.nix deleted file mode 100644 index 76ec2cf..0000000 --- a/home/secrets/default.nix +++ /dev/null @@ -1,31 +0,0 @@ -{ lib, ... }: - -with lib; -let - throwOnCanary = - let - canaryHash = builtins.hashFile "sha256" ./canary; - expectedHash = - "9df8c065663197b5a1095122d48e140d3677d860343256abd5ab6e4fb4c696ab"; - in - if canaryHash != expectedHash - then throw "Secrets are not readable. Have you run `git-crypt unlock`?" - else id; -in -throwOnCanary { - options.my.secrets = mkOption { - type = - let - valueType = with types; oneOf [ - int - str - (attrsOf valueType) - ]; - in - valueType; - }; - - config.my.secrets = { - # Home-manager secrets go here - }; -}