sops first attempt

This commit is contained in:
2025-06-10 10:03:20 -05:00
parent 0b096a33bc
commit 9d41140ef4
4 changed files with 17 additions and 0 deletions
View File
+1
View File
@@ -41,6 +41,7 @@
./home.nix ./home.nix
nixvim.homeManagerModules.nixvim nixvim.homeManagerModules.nixvim
impermanence.homeManagerModules.impermanence impermanence.homeManagerModules.impermanence
sops-nix.homeManagerModules.sops
]; ];
}; };
} }
+13
View File
@@ -52,6 +52,19 @@
allowOther = true; allowOther = true;
}; };
# SOPS config
sops = {
age.sshKeyPaths = [ "/home/user/.ssh/id_ed25519" ];
defaultSopsFormat = "json";
defaultSopsFile = ./secrets/roy.json;
secrets.test = {
path = "%r/test.txt";
};
};
# User services must come after sops secrets
systemd.user.services.mbsync.unitConfig.After = [ "sops-nix.service" ];
# Configure firefox to be resilient against reboot # Configure firefox to be resilient against reboot
# Source = https://github.com/johnmpost/nixos-config # Source = https://github.com/johnmpost/nixos-config
programs.firefox = { programs.firefox = {
+3
View File
@@ -0,0 +1,3 @@
{
"testSecret": "biggleBlorg"
}