16 lines
422 B
Nix
16 lines
422 B
Nix
{ config, inputs, ... }:
|
|
let secretsPath = builtins.toString inputs.homelabSecrets;
|
|
in {
|
|
imports = [ inputs.sops-nix.nixosModules.sops ];
|
|
|
|
sops = {
|
|
defaultSopsFile = "${secretsPath}/secrets.yaml";
|
|
age = {
|
|
sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
|
keyFile = "/var/lib/sops-nix/key.txt";
|
|
generateKey = true;
|
|
};
|
|
};
|
|
sops.secrets = { "tailscale/preauthkeys/poseidon" = { }; };
|
|
|
|
}
|