Squibid
e20755851c
I'd like less generations please side note: it's a bit weird that you can't specify how many generations you'd like to keep, like what if I want 3 generations to stay available?
24 lines
581 B
Nix
24 lines
581 B
Nix
{ inputs, ... }:
|
|
{
|
|
imports = [ inputs.sops-nix.nixosModules.sops ];
|
|
|
|
sops = {
|
|
defaultSopsFile = ../secrets.yaml;
|
|
|
|
# Derive the age key from the systems ssh key. I didn't know this before but
|
|
# it seems like all systems have ssh keys already generated.
|
|
age = {
|
|
sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
|
keyFile = "/var/lib/sops-nix/key.txt";
|
|
generateKey = true;
|
|
};
|
|
|
|
secrets = {
|
|
"mail/me" = {};
|
|
"jellyfin/zachary" = {};
|
|
"wireguard/crayon" = {};
|
|
"actual/key" = {};
|
|
"actual/cert" = {};
|
|
};
|
|
};
|
|
}
|