nix-conf/modules/linux/home-manager/secrets.nix

28 lines
727 B
Nix

{
config,
lib,
...
}: {
options = {
crony.home-secrets.enable = lib.mkEnableOption "Enable home-manager secrets.";
};
config = lib.mkIf config.crony.home-secrets.enable {
age = {
secrets = {
restic-local-pass = {
file = ../../../secrets/restic-local-pass.age;
};
restic-backblaze-pass = {
file = ../../../secrets/restic-backblaze-pass.age;
};
restic-backblaze-repo = {
file = ../../../secrets/restic-backblaze-repo.age;
};
restic-backblaze-env = {
file = ../../../secrets/restic-backblaze-env.age;
};
};
identityPaths = ["/home/crony/.ssh/main" "/root/.ssh/id_ed25519"];
};
};
}