diff options
| -rw-r--r-- | .sops.yaml | 2 | ||||
| -rw-r--r-- | flake.nix | 2 | ||||
| -rw-r--r-- | hosts/configuration.nix | 2 | ||||
| -rw-r--r-- | modules/secrets.nix | 8 |
4 files changed, 14 insertions, 0 deletions
diff --git a/.sops.yaml b/.sops.yaml new file mode 100644 index 0000000..1a516ec --- /dev/null +++ b/.sops.yaml @@ -0,0 +1,2 @@ +creation_rules: + - age: "age14huyqn0vfzqdjty0ewv3fkl95hdjfyp05wul9xt97khvjfu8v33qukte4u" @@ -13,6 +13,8 @@ url = "github:0xc000022070/zen-browser-flake"; inputs.nixpkgs.follows = "nixpkgs"; }; + + sops-nix.url = "github:Mic92/sops-nix/bd695cc4d0a5e1bead703cc1bec5fa3094820a81"; }; outputs = { self, nixpkgs, ... }@inputs: { diff --git a/hosts/configuration.nix b/hosts/configuration.nix index 2d6cd73..423b9bb 100644 --- a/hosts/configuration.nix +++ b/hosts/configuration.nix @@ -6,7 +6,9 @@ ../modules/networking.nix ../modules/development.nix ../modules/gaming.nix + ../modules/secrets.nix inputs.home-manager.nixosModules.default + inputs.sops-nix.nixosModules.sops ]; home-manager = { diff --git a/modules/secrets.nix b/modules/secrets.nix new file mode 100644 index 0000000..df1e9f0 --- /dev/null +++ b/modules/secrets.nix @@ -0,0 +1,8 @@ +{ ... }: { + + sops = { + defaultSopsFile = ./secrets.yaml; + age.sshKeyPaths = [ "/home/kyren/.ssh/id_ed25519" ]; + }; + +} |