sstent/vmimages
1
0
Fork 0
mirror of https://github.com/sstent/vmimages.git synced 2026-02-13 19:06:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

reorg + condiational secrets

Browse Source
This commit is contained in:
sstent
2023-03-09 05:00:20 +00:00
parent 24ef309194
commit dea10b0752
23 changed files with 190 additions and 273 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
modules/home-manager/beets/default.nix
View File

@@ -13,17 +13,9 @@ in {
config = mkIf cfg.enable {
# xdg.configFile."beets/config.old".source = config.lib.file.mkOutOfStoreSymlink /run/user/1000/secrets/test;
# secrets.discogs_json = {
# mode = "0440";
# owner = config.users.users.sstent.name;
# group = config.users.users.sstent.group;
# };
sops = {
sops = {
secrets.discogs_json = {
path = "${config.xdg.configHome}/discogs_token.json";
# path = "${config.home.homeDirectory}/${getEnv_name}";
path = "${config.xdg.configHome}/beets/discogs_token.json";
};
};
programs.beets = {

30
modules/home-manager/keybase/default.nix Normal file
View File

@@ -0,0 +1,30 @@
{ config, pkgs, inputs, lib, util, hostName, ... }:
with lib;
with lib.my;
let
cfg = config.custom.keybase;
username = config.home.username;
secretstore = config._secretstore;
in {
options.custom.keybase = {
enable = mkOption {
type = types.bool;
default = false;
description = "Enable KeyBase";
};
};
config = mkIf cfg.enable {
services.keybase.enable = true;
services.kbfs.enable = true;
systemd.user.services.keybase.Unit.After = [ "sops-nix.service" ];
systemd.user.services.kbfs.Unit.After = [ "sops-nix.service" ];
sops = {
secrets = hm_secrets "${secretstore}/user_dotfiles/${username}@${hostName}/keybase/" "${config.xdg.configHome}/keybase/";
};
};
}