wifi: derive networks from sops secrets file

modules/system/sops.nix

@@ -5,15 +5,28 @@
   lib,
   ...
 }:
+let
+  cfg = config.custom.sops;
+in
 {
   imports = [ inputs.sops-nix.nixosModules.sops ];
 
-  options.custom.sops.enable = lib.mkEnableOption "";
+  options.custom.sops = {
+    enable = lib.mkEnableOption "";
+    defaultSopsFile = lib.mkOption {
+      type = lib.types.path;
+      default = "${self}/hosts/${config.networking.hostName}/secrets.json";
+    };
+    secrets = lib.mkOption {
+      type = lib.types.anything;
+      default = cfg.defaultSopsFile |> builtins.readFile |> builtins.fromJSON;
+    };
+  };
 
-  config = lib.mkIf config.custom.sops.enable {
+  config = lib.mkIf cfg.enable {
     sops = {
       age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
-      defaultSopsFile = "${self}/hosts/${config.networking.hostName}/secrets.json";
+      inherit (cfg) defaultSopsFile;
     };
   };
 }

modules/system/wifi.nix

@@ -5,18 +5,18 @@
   ...
 }:
 let
-  networks = [
-    "EW90N.psk"
-    "Fairphone4.psk"
-    "WLAN-233151.psk"
-    "DSL_EXT.psk"
-    "eduroam.8021x"
-  ];
+  cfg = config.custom.wifi;
 in
 {
-  options.custom.wifi.enable = lib.mkEnableOption "";
+  options.custom.wifi = {
+    enable = lib.mkEnableOption "";
+    networks = lib.mkOption {
+      type = lib.types.listOf lib.types.str;
+      default = config.custom.sops.secrets.iwd |> lib.attrNames;
+    };
+  };
 
-  config = lib.mkIf config.custom.wifi.enable {
+  config = lib.mkIf cfg.enable {
     networking.wireless.iwd = {
       enable = true;
       settings = {
@@ -28,7 +28,7 @@ in
     environment.systemPackages = [ pkgs.iwgtk ];
 
     sops.secrets =
-      networks
+      cfg.networks
       |> lib.map (name: {
         name = "iwd/${name}";
         value = { };
@@ -36,7 +36,7 @@ in
       |> lib.listToAttrs;
 
     systemd.tmpfiles.rules =
-      networks
+      cfg.networks
       |> lib.map (name: "C /var/lib/iwd/${name} - - - - ${config.sops.secrets."iwd/${name}".path}");
   };
 }