26 lines
863 B
Nix
26 lines
863 B
Nix
{ config, pkgs, ... }:
|
|
{
|
|
# This will add secrets.yaml to the nix store
|
|
# You can avoid this by adding a string to the full path instead, i.e.
|
|
# sops.defaultSopsFile = "/root/.sops/secrets/example.yaml";
|
|
# sops.defaultSopsFile = "/etc/nixos/nix-dotfiles/secrets/secrets.yaml";
|
|
sops = {
|
|
defaultSopsFile = ./secrets.yaml;
|
|
validateSopsFiles = false;
|
|
|
|
# This will automaticx-sopsally import SSH keys as age keys
|
|
age.sshKeyPaths = [
|
|
"/etc/ssh/nixos"
|
|
"/root/.ssh/nixos"
|
|
"/home/gunalx/.ssh/nixos"
|
|
];
|
|
|
|
#This is using an age key that is expected to already be in the filesystem
|
|
age.keyFile = "/var/lib/sops-nix/keys.txt";
|
|
#age.keyFile = "/root/.config/sops/age/keys.txt";
|
|
age.generateKey = true;
|
|
# This is the actual specification of the secrets.
|
|
#secrets."myservice/my_subdir/my_secret" = {};
|
|
};
|
|
}
|