SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 17:31:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Manage github ssh-keys with sops

Browse source
This commit is contained in:
SebastianStork 2024-07-05 15:04:57 +02:00
parent c1cba95e02
commit ae4a2e5b72
10 changed files with 92 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

7
modules/home-manager/git.nix
View file

@ -9,7 +9,12 @@
userEmail = "sebastian.stork@pm.me";
extraConfig.init.defaultBranch = "main";
};
programs.lazygit.enable = true;
sops.secrets.github-ssh-key.path = "${config.home.homeDirectory}/.ssh/github";
programs.ssh = {
enable = true;
matchBlocks."github.com".identityFile = "~/.ssh/github";
};
};
}

9
modules/home-manager/sops.nix
View file

@ -4,7 +4,7 @@
config,
lib,
...
}:
}@moduleArgs:
{
imports = [ inputs.sops-nix.homeManagerModules.sops ];
@ -13,7 +13,12 @@
config = lib.mkIf config.myConfig.sops.enable {
sops = {
age.sshKeyPaths = [ "${config.home.homeDirectory}/.ssh/id_ed25519" ];
defaultSopsFile = "${self}/users/${config.home.username}/secrets.yaml";
defaultSopsFile =
let
hostName = moduleArgs.osConfig.networking.hostName or "";
hostDir = if hostName != "" then "/@" + hostName else "";
in
"${self}/users/${config.home.username}${hostDir}/secrets.yaml";
};
};
}