use sops for secret management

This commit is contained in:
cswimr 2024-12-02 20:50:24 -05:00
parent 6eeea660f0
commit cd820411c4
Signed by: cswimr
GPG key ID: 0EC431A8DA8F8087
9 changed files with 95 additions and 25 deletions

13
nixos/sops.nix Normal file
View file

@ -0,0 +1,13 @@
{ user, ... }:
{
sops = {
defaultSopsFile = ../secrets/secrets.yaml;
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
secrets = {
"zipline" = {
owner = user;
path = "/home/${user}/.secrets/zipline";
};
};
};
}