✨ [shared] Sops nix for user passwords

2025-04-17 00:31:19 +02:00
parent 8244fe8927
commit 01e5fb42d3
9 changed files with 93 additions and 7 deletions
--- a/shared/modules/security/sops.nix
+++ b/shared/modules/security/sops.nix
@ -0,0 +1,20 @@
+{
+  inputs,
+  lib,
+  systemConfig,
+  ...
+}:
+
+{
+  imports = [
+    inputs.sops-nix.nixosModules.sops
+  ];
+
+  sops = {
+    defaultSopsFile = lib.custom.relativeToRoot "shared/secrets/secrets.yaml";
+    defaultSopsFormat = "yaml";
+
+    age.keyFile = "/home/${systemConfig.user.name}/.config/sops/age/keys.txt";
+    secrets.password.neededForUsers = true;
+  };
+}