Files
nixy/hosts/server/secrets/default.nix
2025-03-24 13:15:02 +01:00

30 lines
731 B
Nix

{ pkgs, ... }: {
sops = {
age.keyFile = "/home/hadi/.config/sops/age/keys.txt";
defaultSopsFile = ./secrets.yaml;
secrets = {
sshconfig = {
owner = "hadi";
path = "/home/hadi/.ssh/config";
mode = "0600";
};
github-key = {
owner = "hadi";
path = "/home/hadi/.ssh/github";
mode = "0600";
};
cloudflare-dns-token = { path = "/etc/cloudflare/dnskey.txt"; };
nextcloud-pwd = { path = "/etc/nextcloud/pwd.txt"; };
adguard-pwd = { };
hoarder = { };
recyclarr = {
owner = "recyclarr";
mode = "0777";
};
wireguard-pia = { };
};
};
environment.systemPackages = with pkgs; [ sops age ];
}