22 lines
522 B
Nix
22 lines
522 B
Nix
{ user, ... }:
|
|
{
|
|
sops = {
|
|
defaultSopsFile = ../.sops-secrets.yaml;
|
|
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
|
secrets = {
|
|
"coastalcommits" = {
|
|
owner = user;
|
|
path = "/home/${user}/.secrets/coastalcommits";
|
|
};
|
|
"zipline" = {
|
|
owner = user;
|
|
path = "/home/${user}/.secrets/zipline";
|
|
};
|
|
"users/cswimr/password" = {
|
|
neededForUsers = true;
|
|
owner = user;
|
|
path = "/home/${user}/.secrets/password";
|
|
};
|
|
};
|
|
};
|
|
}
|