dotfiles/hosts/_common/ragenix.nix

29 lines
961 B
Nix

# TODO check out the by host way this person does: https://github.com/hlissner/dotfiles/blob/089f1a9da9018df9e5fc200c2d7bef70f4546026/modules/agenix.nix
{ settings, lib, ragenix, ... }:
let
# secretsFile = (settings.secretsDir + /secrets.nix);
in
{
imports = [ ragenix.nixosModules.age ];
environment.systemPackages = [ ragenix.packages.${settings.system.system}.default ];
age = {
secrets =
# builtins.mapAttrs
# (name: _value: lib.nameValuePair (lib.removeSuffix ".age" name) {
# file = (settings.secretsDir + "/${name}");
# owner = lib.mkDefault settings.user.username;
# })
# (import secretsFile);
{
nix2github = {
file = /${settings.secretsDir}/nix2github.age;
owner = settings.user.username;
};
nix2bitbucket = {
file = /${settings.secretsDir}/nix2bitbucket.age;
owner = settings.user.username;
};
};
};
}