nix-conf/modules/linux/nixos/secrets.nix

25 lines
564 B
Nix

{
config,
lib,
...
}: {
options = {
crony.secrets.enable = lib.mkEnableOption "Enable desktop secrets.";
};
config = lib.mkIf config.crony.secrets.enable {
age = {
secrets = {
wg-desktop = {
file = ../../../secrets/wg-desktop.age;
};
crony-passwd = {
file = ../../../secrets/crony-passwd-desktop.age;
};
root-passwd = {
file = ../../../secrets/root-passwd.age;
};
};
identityPaths = ["/home/crony/.ssh/main" "/root/.ssh/id_ed25519"];
};
};
}