SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 14:01:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

wifi: derive networks from sops secrets file

Browse source
This commit is contained in:
SebastianStork 2025-07-20 14:47:46 +02:00
parent 2e3b64860f
commit 2da2cd592e
2 changed files with 27 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

19
modules/system/sops.nix
View file

@ -5,15 +5,28 @@
lib,
...
}:
let
cfg = config.custom.sops;
in
{
imports = [ inputs.sops-nix.nixosModules.sops ];
options.custom.sops.enable = lib.mkEnableOption "";
options.custom.sops = {
enable = lib.mkEnableOption "";
defaultSopsFile = lib.mkOption {
type = lib.types.path;
default = "${self}/hosts/${config.networking.hostName}/secrets.json";
};
secrets = lib.mkOption {
type = lib.types.anything;
default = cfg.defaultSopsFile |> builtins.readFile |> builtins.fromJSON;
};
};
config = lib.mkIf config.custom.sops.enable {
config = lib.mkIf cfg.enable {
sops = {
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
defaultSopsFile = "${self}/hosts/${config.networking.hostName}/secrets.json";
inherit (cfg) defaultSopsFile;
};
};
}