dot013/spacestation
1
0
Fork 0
Code Issues Pull Requests Activity

refactor: remove lesser secrets

Browse Source
This commit is contained in:
Guz
2025-09-13 11:29:15 -03:00
parent ba4d59b117
commit 4d14dcd48c
3 changed files with 24 additions and 183 deletions
Download Patch File Download Diff File Expand all files Collapse all files

60
secrets.nix
View File

@@ -4,62 +4,50 @@
lib,
pkgs,
...
}: let
lesser-secrets = with builtins;
fromJSON (readFile ./secrets/spacestation.lesser.decrypted.json);
jsonType = pkgs.formats.json {};
in {
}:
with lib; {
imports = [
inputs.sops-nix.nixosModules.sops
];
options.spacestation-secrets = with lib;
with lib.types; {
lesser = mkOption {
type = submodule ({...}: {
freeformType = jsonType.type;
options = {};
});
default = lesser-secrets;
};
};
config = with lib; {
environment.systemPackages = with pkgs; [
sops
];
sops.defaultSopsFile = ./secrets/spacestation.yaml;
sops.defaultSopsFormat = "yaml";
environment.systemPackages = with pkgs; [
sops
];
sops.secrets."guz/password" = {
owner = config.users.users."guz".name;
};
sops.defaultSopsFile = ./secrets.yaml;
sops.defaultSopsFormat = "yaml";
sops.secrets."keiko/env-file" = {
owner = config.services.keikos.web.user;
};
sops.secrets = {
"cloudflared/tunnel-env" = {};
sops.secrets."forgejo/user1/name" = mkIf config.services.forgejo.enable {
"forgejo/user1/name" = mkIf config.services.forgejo.enable {
owner = config.services.forgejo.user;
};
sops.secrets."forgejo/user1/password" = mkIf config.services.forgejo.enable {
"forgejo/user1/password" = mkIf config.services.forgejo.enable {
owner = config.services.forgejo.user;
};
sops.secrets."forgejo/user1/email" = mkIf config.services.forgejo.enable {
"forgejo/user1/email" = mkIf config.services.forgejo.enable {
owner = config.services.forgejo.user;
};
sops.secrets."forgejo/git-password" = mkIf config.services.forgejo.enable {
"forgejo/git-password" = mkIf config.services.forgejo.enable {
owner = config.services.forgejo.user;
};
sops.secrets."forgejo/anubis/hexFile" = {
"forgejo/anubis/hexFile" = {
owner = config.services.anubis.instances."forgejo".user;
};
sops.secrets."medama/anubis/hexFile" = {
owner = config.services.anubis.instances."medama".user;
"guz/password" = {
owner = config.users.users."guz".name;
};
sops.secrets."cloudflared/tunnel-env" = {};
"keiko/env-file" = {
owner = config.services.keikos.web.user;
};
sops.age.keyFile = "/home/guz/.config/sops/age/keys.txt";
"medama/anubis/hexFile" = {
owner = config.services.anubis.instances."medama".user;
};
};
sops.age.keyFile = "/home/guz/.config/sops/age/keys.txt";
}