21 lines
406 B
Nix
21 lines
406 B
Nix
|
{ config, lib, pkgs, ... }:
|
||
|
|
|
||
|
|
{
|
||
|
|
sops.defaultSopsFile = "../secrets.yaml";
|
||
|
|
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
||
|
|
|
||
|
|
sops.secrets.cftoken = {
|
||
|
|
owner = "maddy";
|
||
|
|
group = "maddy";
|
||
|
|
mode = "0440";
|
||
|
|
restartUnits = [ "maddy.service" ];
|
||
|
|
};
|
||
|
|
|
||
|
|
sops.secrets.mxpass = {
|
||
|
|
owner = "maddy";
|
||
|
|
group = "maddy";
|
||
|
|
mode = "0440";
|
||
|
|
restartUnits = [ "maddy.service" ];
|
||
|
|
};
|
||
|
|
}
|