23 lines
429 B
Nix
23 lines
429 B
Nix
{ pkgs, user, ... }:
|
|
{
|
|
environment.systemPackages = with pkgs; [
|
|
age
|
|
ssh-to-age
|
|
sops
|
|
];
|
|
sops = {
|
|
defaultSopsFile = ../sops-secrets.yaml;
|
|
defaultSopsFormat = "yaml";
|
|
# age = {
|
|
# sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
|
# generateKey = true;
|
|
# };
|
|
# gnupg = {
|
|
# sshKeyPaths = [];
|
|
# home = "/home/${user}/.gnupg";
|
|
# };
|
|
secrets.example = {};
|
|
};
|
|
}
|
|
|