mirror of
https://github.com/sstent/vmimages.git
synced 2026-02-13 19:06:54 +00:00
reorg + condiational secrets
This commit is contained in:
@@ -1,10 +1,9 @@
|
||||
# This file (and the global directory) holds config that i use on all hosts
|
||||
{ lib, inputs, outputs, pkgs, ... }:
|
||||
{ lib, inputs, outputs, pkgs, config, ... }:
|
||||
{
|
||||
imports = [
|
||||
inputs.home-manager.nixosModules.home-manager
|
||||
./sops.nix
|
||||
./syncthing.nix
|
||||
inputs.sops-nix.nixosModules.sops
|
||||
]++ (builtins.attrValues outputs.nixosModules);
|
||||
|
||||
###dotfiles path variable
|
||||
@@ -32,6 +31,14 @@
|
||||
config = {
|
||||
system.stateVersion = "22.11";
|
||||
|
||||
|
||||
sops = {
|
||||
# defaultSopsFile = ./secrets.yaml;
|
||||
defaultSopsFile = "${config._secretstore}/host-secrets.yaml";
|
||||
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
|
||||
};
|
||||
|
||||
|
||||
home-manager = {
|
||||
useUserPackages = true;
|
||||
extraSpecialArgs = { inherit inputs outputs; };
|
||||
|
||||
Reference in New Issue
Block a user