sops first attempt
This commit is contained in:
@@ -41,6 +41,7 @@
|
|||||||
./home.nix
|
./home.nix
|
||||||
nixvim.homeManagerModules.nixvim
|
nixvim.homeManagerModules.nixvim
|
||||||
impermanence.homeManagerModules.impermanence
|
impermanence.homeManagerModules.impermanence
|
||||||
|
sops-nix.homeManagerModules.sops
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -52,6 +52,19 @@
|
|||||||
allowOther = true;
|
allowOther = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
# SOPS config
|
||||||
|
sops = {
|
||||||
|
age.sshKeyPaths = [ "/home/user/.ssh/id_ed25519" ];
|
||||||
|
defaultSopsFormat = "json";
|
||||||
|
defaultSopsFile = ./secrets/roy.json;
|
||||||
|
secrets.test = {
|
||||||
|
path = "%r/test.txt";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
# User services must come after sops secrets
|
||||||
|
systemd.user.services.mbsync.unitConfig.After = [ "sops-nix.service" ];
|
||||||
|
|
||||||
# Configure firefox to be resilient against reboot
|
# Configure firefox to be resilient against reboot
|
||||||
# Source = https://github.com/johnmpost/nixos-config
|
# Source = https://github.com/johnmpost/nixos-config
|
||||||
programs.firefox = {
|
programs.firefox = {
|
||||||
|
|||||||
@@ -0,0 +1,3 @@
|
|||||||
|
{
|
||||||
|
"testSecret": "biggleBlorg"
|
||||||
|
}
|
||||||
Reference in New Issue
Block a user