sops: restructure secrets files

This commit is contained in:
SebastianStork 2025-07-20 19:56:52 +02:00
parent 8561f6381b
commit d14732b063
10 changed files with 58 additions and 45 deletions

View file

@ -79,13 +79,13 @@ in
}
(lib.mkIf tailscaleHostsExist {
sops.secrets."service-tailscale-auth-key".owner = config.services.caddy.user;
sops.secrets."tailscale/service-auth-key".owner = config.services.caddy.user;
services.caddy = {
package = caddyWithTailscale;
globalConfig = ''
tailscale {
auth_key {file.${config.sops.secrets."service-tailscale-auth-key".path}}
auth_key {file.${config.sops.secrets."tailscale/service-auth-key".path}}
}
'';
};