reorganize secrets

This commit is contained in:
Grisha Shipunov 2025-01-19 20:46:38 +01:00
parent 42128ebbe1
commit 76e043171c
14 changed files with 49 additions and 58 deletions

View file

@ -1,10 +1,21 @@
{ ... }:
{ config, ... }:
{
imports = [
./configuration.nix
./hardware-configuration.nix
./networking.nix
./proxy
./secrets.nix
];
sops.defaultSopsFile = ./secrets.yaml;
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
sops.secrets = {
"wg/0xa-mgmt" = {
owner = config.users.users.systemd-network.name;
};
"wg/0xa-proxy" = {
owner = config.users.users.systemd-network.name;
};
};
}