introduce sops to the config to be able to use encrypted tokens and passwords, also use these in factorio

This commit is contained in:
Christoph Hollizeck 2024-04-27 20:39:13 +02:00
parent fbbc59c2c2
commit d74f441506
Signed by: Daholli
GPG key ID: 249300664F2AF2C7
9 changed files with 226 additions and 30 deletions

View file

@ -0,0 +1,32 @@
{
options,
config,
pkgs,
lib,
inputs,
...
}:
with lib;
with lib.wyrdgard;
let
cfg = config.wyrdgard.security.sops;
in
{
options.wyrdgard.security.sops = with types; {
enable = mkBoolOpt true "Enable sops (Default true)";
};
config = mkIf cfg.enable {
environment.systemPackages = with pkgs; [
sops
age
];
sops = {
defaultSopsFile = ../../../../secrets/secrets.yaml;
defaultSopsFormat = "yaml";
age.keyFile = "/home/cholli/.config/sops/age/keys.txt";
};
};
}