mirror of
https://github.com/Swarsel/.dotfiles.git
synced 2025-12-06 17:17:22 +01:00
39 lines
1.1 KiB
Nix
39 lines
1.1 KiB
Nix
{ config, lib, ... }:
|
|
let
|
|
mkIfElse = p: yes: no: lib.mkMerge [
|
|
(lib.mkIf p yes)
|
|
(lib.mkIf (!p) no)
|
|
];
|
|
in
|
|
{
|
|
sops = {
|
|
|
|
age.sshKeyPaths = mkIfElse config.swarselsystems.isBtrfs [ "/persist/.ssh/sops" ] [ "${config.users.users.swarsel.home}/.ssh/sops" ];
|
|
defaultSopsFile = mkIfElse config.swarselsystems.isBtrfs "/persist/.dotfiles/secrets/general/secrets.yaml" "${config.users.users.swarsel.home}/.dotfiles/secrets/general/secrets.yaml";
|
|
|
|
validateSopsFiles = false;
|
|
|
|
secrets = {
|
|
ernest = { };
|
|
frauns = { };
|
|
hotspot = { };
|
|
eduid = { };
|
|
edupass = { };
|
|
handyhotspot = { };
|
|
vpnuser = { };
|
|
vpnpass = { };
|
|
};
|
|
templates = {
|
|
"network-manager.env".content = ''
|
|
ERNEST=${config.sops.placeholder.ernest}
|
|
FRAUNS=${config.sops.placeholder.frauns}
|
|
HOTSPOT=${config.sops.placeholder.hotspot}
|
|
EDUID=${config.sops.placeholder.eduid}
|
|
EDUPASS=${config.sops.placeholder.edupass}
|
|
HANDYHOTSPOT=${config.sops.placeholder.handyhotspot}
|
|
VPNUSER=${config.sops.placeholder.vpnuser}
|
|
VPNPASS=${config.sops.placeholder.vpnpass}
|
|
'';
|
|
};
|
|
};
|
|
}
|