24 lines
516 B
Nix
24 lines
516 B
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
let
|
|
# Central list of secrets
|
|
secret_names = [
|
|
"tailscale_authkey"
|
|
];
|
|
|
|
# Map the list into age.secrets definitions
|
|
secrets = builtins.listToAttrs (map
|
|
(name: {
|
|
name = name;
|
|
value.file = ../../secrets/${name}.age;
|
|
})
|
|
secret_names);
|
|
in {
|
|
options.secrets.enable = lib.mkEnableOption "Enable system secrets";
|
|
|
|
config = lib.mkIf config.modules.secrets.enable {
|
|
age.keyFile = "/home/blake/.keyring/age/keys.txt";
|
|
age.secrets = secrets;
|
|
};
|
|
}
|