summaryrefslogtreecommitdiff
path: root/hosts/cloud
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/cloud')
-rw-r--r--hosts/cloud/default.nix1
-rw-r--r--hosts/cloud/secrets.nix11
2 files changed, 12 insertions, 0 deletions
diff --git a/hosts/cloud/default.nix b/hosts/cloud/default.nix
index adac89e..1cb37c6 100644
--- a/hosts/cloud/default.nix
+++ b/hosts/cloud/default.nix
@@ -3,5 +3,6 @@
./configuration.nix
./hardware-configuration.nix
./networking.nix
+ ./secrets.nix
];
}
diff --git a/hosts/cloud/secrets.nix b/hosts/cloud/secrets.nix
new file mode 100644
index 0000000..d9d5b51
--- /dev/null
+++ b/hosts/cloud/secrets.nix
@@ -0,0 +1,11 @@
+{ config, ... }:
+{
+ sops.defaultSopsFile = ../../secrets/cloud/secrets.yaml;
+ sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+
+ sops.secrets = {
+ "wg/0xa-mgmt" = {
+ owner = config.users.users.systemd-network.name;
+ };
+ };
+}