Move sops into separate module
This commit is contained in:
parent
10d3dc205c
commit
333f06a179
5 changed files with 35 additions and 30 deletions
31
flake.nix
31
flake.nix
|
@ -41,42 +41,15 @@
|
||||||
systems = [ "aarch64-linux" ];
|
systems = [ "aarch64-linux" ];
|
||||||
imports = [
|
imports = [
|
||||||
./base
|
./base
|
||||||
|
./sops
|
||||||
./home-manager
|
./home-manager
|
||||||
];
|
];
|
||||||
perSystem =
|
perSystem =
|
||||||
{ pkgs, system, ... }:
|
{ pkgs, system, ... }:
|
||||||
# let
|
|
||||||
# pkgs = import inputs.nixpkgs {
|
|
||||||
# inherit system;
|
|
||||||
# overlays = [
|
|
||||||
# inputs.nur.overlays.default
|
|
||||||
# inputs.nixgl.overlays.default
|
|
||||||
# ];
|
|
||||||
# };
|
|
||||||
# in
|
|
||||||
{
|
{
|
||||||
# _module.args.pkgs = pkgs;
|
|
||||||
# https://flake.parts/options/devshell.html
|
# https://flake.parts/options/devshell.html
|
||||||
devshells.default = {
|
devshells.default = {
|
||||||
commands = [
|
packages = [ pkgs.forgejo-cli ];
|
||||||
{
|
|
||||||
help = " generate age key";
|
|
||||||
name = "age-generate-key";
|
|
||||||
command = "${pkgs.uutils-coreutils-noprefix}/bin/mkdir -p ~/.config/sops/age && ${pkgs.age}/bin/age-keygen -o ~/.config/sops/age/keys.txt && ${pkgs.uutils-coreutils-noprefix}/bin/cat ~/.config/sops/age/keys.txt";
|
|
||||||
category = " SOPS";
|
|
||||||
}
|
|
||||||
{
|
|
||||||
help = " edit secrets.yaml";
|
|
||||||
name = "sops-edit";
|
|
||||||
command = "${pkgs.sops}/bin/sops edit ./home-manager/secrets/secrets.yaml";
|
|
||||||
category = " SOPS";
|
|
||||||
}
|
|
||||||
];
|
|
||||||
packages = [
|
|
||||||
pkgs.age
|
|
||||||
pkgs.forgejo-cli
|
|
||||||
pkgs.sops
|
|
||||||
];
|
|
||||||
devshell = {
|
devshell = {
|
||||||
motd = ''
|
motd = ''
|
||||||
{202} Nix Laptop Configuration{reset}
|
{202} Nix Laptop Configuration{reset}
|
||||||
|
|
|
@ -18,7 +18,7 @@ in
|
||||||
secrets = {
|
secrets = {
|
||||||
openrouter_api_key = { };
|
openrouter_api_key = { };
|
||||||
};
|
};
|
||||||
defaultSopsFile = ./secrets/secrets.yaml;
|
defaultSopsFile = ../sops/secrets.yaml;
|
||||||
age.keyFile = /home/${username}/.config/sops/age/keys.txt;
|
age.keyFile = /home/${username}/.config/sops/age/keys.txt;
|
||||||
};
|
};
|
||||||
# https://nix.catppuccin.com/search/rolling/
|
# https://nix.catppuccin.com/search/rolling/
|
||||||
|
|
32
sops/default.nix
Normal file
32
sops/default.nix
Normal file
|
@ -0,0 +1,32 @@
|
||||||
|
{ flake-parts-lib, ... }:
|
||||||
|
{
|
||||||
|
options = {
|
||||||
|
perSystem = flake-parts-lib.mkPerSystemOption (
|
||||||
|
{ config, pkgs, ... }:
|
||||||
|
{
|
||||||
|
config = {
|
||||||
|
devshells.default = {
|
||||||
|
commands = [
|
||||||
|
{
|
||||||
|
help = " generate age key";
|
||||||
|
name = "age-generate-key";
|
||||||
|
command = "${pkgs.uutils-coreutils-noprefix}/bin/mkdir -p ~/.config/sops/age && ${pkgs.age}/bin/age-keygen -o ~/.config/sops/age/keys.txt && ${pkgs.uutils-coreutils-noprefix}/bin/cat ~/.config/sops/age/keys.txt";
|
||||||
|
category = " SOPS";
|
||||||
|
}
|
||||||
|
{
|
||||||
|
help = " edit secrets.yaml";
|
||||||
|
name = "sops-edit";
|
||||||
|
command = "${pkgs.sops}/bin/sops edit ./sops/secrets.yaml";
|
||||||
|
category = " SOPS";
|
||||||
|
}
|
||||||
|
];
|
||||||
|
packages = [
|
||||||
|
pkgs.age
|
||||||
|
pkgs.sops
|
||||||
|
];
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
||||||
|
);
|
||||||
|
};
|
||||||
|
}
|
Loading…
Add table
Reference in a new issue