blake/nix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

29 current 2025-10-07 15:47:05 25.05.20251001.5b5be50 6.12.49 *

Browse Source
This commit is contained in:
blake
2025-10-07 16:23:10 -05:00
parent 7bee479981
commit 62011f0d74
1 changed files with 24 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
modules/system/sops.nix
View File

@@ -18,38 +18,38 @@ in
age.keyFile = "/home/blake/.config/sops/age/keys.txt"; age.keyFile = "/home/blake/.config/sops/age/keys.txt";
secrets = { secrets = {
# blake user secrets # define secrets with the following syntax
lib.mkIf config.users.blake.enable { # secret path is the nesting of headings in the yaml file
"blake_passwd" = { # the secret is auto place in /run/<path to secret> path allows you to symlink to the /run to where ever is needed
owner = "root"; # "<secret_name/path>" = {
group = "root"; # owner = "<user>";
neededForUsers = true; # group = "<group>";
}; # path = "<path on system to place flile>"
} # };
# backups secrets "tailscale_authkey" = lib.mkIf config.modules.system.tailscale.enable {
owner = "root";
};
"borg_passwd" = lib.mkIf config.modules.system.backups.enable { "borg_passwd" = lib.mkIf config.modules.system.backups.enable {
owner = "root"; owner = "root";
group = "root"; group = "root";
}; };
# tailscale secrets "blake_passwd" = lib.mkIf config.users.blake.enable {
"tailscale_authkey" = lib.mkIf config.modules.system.tailscale.enable {
owner = "root"; owner = "root";
group = "root";
neededForUsers = true;
}; };
# nginx secrets # "ssl_blakedheld_crt" = lib.mkIf config.modules.homelab.nginx-proxy.enable {
# lib.mkIf config.modules.homelab.nginx-proxy.enable { # owner = "nginx";
# "ssl_blakedheld_crt" = { # group = "nginx";
# owner = "nginx"; # };
# group = "nginx";
# };
# #
# "ssl_blakedheld_key" = { # "ssl_blakedheld_key" = lib.mkIf config.modules.homelab.nginx-proxy.enable {
# owner = "nginx"; # owner = "nginx";
# group = "nginx"; # group = "nginx";
# }; # };
# }
}; };
}; };