nixy/hosts/work/secrets/default.nix

# Those are my secrets, encrypted with sops
# You shouldn't import this file, unless you edit it
{
  pkgs,
  config,
  ...
}: let
  username = config.var.username;
  home = "/home/${username}";
in {
  sops = {
    age.keyFile = "${home}/.config/sops/age/keys.txt";
    defaultSopsFile = ./secrets.yaml;
    secrets = {
      ssh-config = {
        owner = username;
        mode = "0600";
        path = "${home}/.ssh/config";
      };
      netrc = {
        owner = username;
        mode = "0600";
        path = "${home}/.netrc";
      };
      ssh-github-key = {
        owner = username;
        mode = "0600";
        path = "${home}/.ssh/github";
      };
      ssh-gitlab-key = {
        owner = username;
        mode = "0600";
        path = "${home}/.ssh/gitlab";
      };
    };
  };

  environment.systemPackages = with pkgs; [
    sops
    age
  ];
}