winston/dotfiles
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

feat: sops party

Browse source
This commit is contained in:
winston 2023-02-07 03:55:12 +01:00
parent bf6dc8b4b1
commit e325340b26
Signed by: winston
GPG key ID: 3786770EDBC2B481
2 changed files with 14 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
home.nix
View file

@ -17,6 +17,7 @@ in
nixpkgs.config.allowUnfree = true;
imports = [
"${builtins.fetchTarball "https://github.com/Mic92/sops-nix/archive/feat/home-manager.tar.gz"}/modules/home-manager/sops.nix"
./catppuccin
./modules/firefox.nix
./modules/git.nix
@ -27,13 +28,10 @@ in
./modules/music.nix
./modules/neovim.nix
./modules/newsboat.nix
# ./modules/sketchybar.nix
./modules/sops.nix
./modules/vscode.nix
./modules/wezterm.nix
./modules/zsh.nix
# FIXME: change after https://github.com/Mic92/sops-nix/pull/261 is merged
# "${builtins.fetchTarball "https://github.com/Mic92/sops-nix/archive/feat/home-manager.tar.gz"}/modules/home-manager/sops.nix"
] ++ lib.optionals (builtins.pathExists ./modules/secrets.nix) [
# hotfix: use fucking git-secret, this is atrocious beyond belief
./modules/secrets.nix
@ -47,15 +45,6 @@ in
k9s.enable = true;
};
# TODO:: enable after sops supports nix-darwin
# sops = {
# gnupg.home = "${config.xdg.configHome}/gnupg";
# defaultSopsFile = ./secrets.yaml;
# secrets."kubernetes-work-prod" = {
# path = "${config.xdg.configHome}/kube/work-prod";
# };
# };
manual.manpages.enable = false;
home = {

12
modules/sops.nix Normal file
View file

@ -0,0 +1,12 @@
{ config, lib, ... }:
{
# TODO: enable after sops supports nix-darwin
sops = {
gnupg.home = "${config.xdg.configHome}/gnupg";
defaultSopsFile = ../secrets.yaml;
secrets."kubernetes-work-prod" = {
path = "${config.xdg.configHome}/kube/work-prod";
};
};
}