get secrets workinggit add ../../modules/system/age.nix

modules/system/age.nix

@@ -0,0 +1,23 @@
+{ config, lib, pkgs, ... }:
+
+let
+  # Central list of secrets
+  secret_names = [
+    "tailscale_authkey"
+  ];
+
+  # Map the list into age.secrets definitions
+  secrets = builtins.listToAttrs (map
+    (name: {
+      name = name;
+      value.file = ../../secrets/${name}.age;
+    })
+    secret_names);
+in {
+  options.secrets.enable = lib.mkEnableOption "Enable system secrets";
+
+  config = lib.mkIf config.modules.secrets.enable {
+    age.keyFile = "/home/blake/.keyring/age/keys.txt";
+    age.secrets = secrets;
+  };
+}