12 lines
452 B
Nix
12 lines
452 B
Nix
{ config, pkgs, inputs, lib, hwconfig, ... }:
|
|
let
|
|
keyPath = (if hwconfig.useImpermanence then "/persist/sops/age/keys.txt" else "/var/lib/sops/age/keys.txt");
|
|
in
|
|
{
|
|
environment.systemPackages = with pkgs; [sops];
|
|
sops.defaultSopsFile = ./secrets/secrets.yaml;
|
|
sops.defaultSopsFormat = "yaml";
|
|
sops.age.keyFile = keyPath;
|
|
# This will generate a new key if the key specified above does not exist
|
|
sops.age.generateKey = true;
|
|
}
|