sops secret setup

2025-04-15 20:55:17 -05:00
parent 99c3cab801
commit dac7920262
5 changed files with 47 additions and 1 deletions
@@ -1,10 +1,23 @@
-{ config, pkgs, ... }:
+{ config, pkgs, sops, ... }:

 {

  home.username = "sysAdmin";
  home.homeDirectory = "/home/sysAdmin";

+  # Secret Management
+  sops = {
+    age.keyFile = "/home/sysAdmin/.config/sops/age/keys.txt"; # No password!
+
+    defaultSopsFile = ./secrets/build.json;
+    defaultSymlinkPath = "/run/user/1000/secrets";
+    defaultSecretsMountPoint = "/run/user/1000/secrets.d";
+
+    secrets.homelabBuild = {
+      path = "${config.sops.defaultSymlinkPath}/homelabBuild";
+    };
+  };
+
  home.packages = with pkgs; [
    git
    tree