diff options
| author | Fuwn <[email protected]> | 2025-05-04 22:06:38 -0700 |
|---|---|---|
| committer | Fuwn <[email protected]> | 2025-05-04 22:06:38 -0700 |
| commit | b3ab73a336fca4c575bb50af5db632f19db3f559 (patch) | |
| tree | 3b25be164de60bf9036152fc51fa80e2aa611458 /modules/base | |
| parent | UTM: Add UTM build host (diff) | |
| download | nixos-config-b3ab73a336fca4c575bb50af5db632f19db3f559.tar.xz nixos-config-b3ab73a336fca4c575bb50af5db632f19db3f559.zip | |
Nara: Set up SOPS
Diffstat (limited to 'modules/base')
| -rw-r--r-- | modules/base/default.nix | 1 | ||||
| -rw-r--r-- | modules/base/sops.nix | 17 |
2 files changed, 18 insertions, 0 deletions
diff --git a/modules/base/default.nix b/modules/base/default.nix index bca5d83..f1dedf0 100644 --- a/modules/base/default.nix +++ b/modules/base/default.nix @@ -2,5 +2,6 @@ imports = [ ./nix.nix ./programs.nix + ./sops.nix ]; } diff --git a/modules/base/sops.nix b/modules/base/sops.nix new file mode 100644 index 0000000..7cae1c9 --- /dev/null +++ b/modules/base/sops.nix @@ -0,0 +1,17 @@ +{ pkgs, self, ... }: +{ + environment.systemPackages = [ + pkgs.sops + ]; + + sops = { + gnupg.sshKeyPaths = [ ]; + secrets.tailscale_authentication_key.sopsFile = "${self}/secrets/hosts.yaml"; + + age = { + sshKeyPaths = [ ]; + keyFile = "/var/lib/sops-nix/key.txt"; + generateKey = true; + }; + }; +} |