reorganize secrets

1 files changed, 13 insertions, 2 deletions

diff --git a/hosts/cloud/default.nix b/hosts/cloud/default.nix
index c848297..0c2dbca 100644
--- a/hosts/cloud/default.nix
+++ b/hosts/cloud/default.nix
@@ -1,10 +1,21 @@
-{ ... }:
+{ config, ... }:
 {
   imports = [
     ./configuration.nix
     ./hardware-configuration.nix
     ./networking.nix
     ./proxy
-    ./secrets.nix
   ];
+
+  sops.defaultSopsFile = ./secrets.yaml;
+  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+
+  sops.secrets = {
+    "wg/0xa-mgmt" = {
+      owner = config.users.users.systemd-network.name;
+    };
+    "wg/0xa-proxy" = {
+      owner = config.users.users.systemd-network.name;
+    };
+  };
 }