feat: add default sops

2025-04-28 22:47:10 +02:00
parent 8bdbbcd21c
commit 7cf5515ed9
2 changed files with 9 additions and 0 deletions
--- a/modules/cloonar-assistant/default.nix
+++ b/modules/cloonar-assistant/default.nix
@@ -177,6 +177,7 @@ in {
  };
  imports = [
    # Include the results of the hardware scan.
+    ./sops.nix
    ./networking
    ./updns
    ./home-assistant
--- a/modules/cloonar-assistant/sops.nix
+++ b/modules/cloonar-assistant/sops.nix
@@ -0,0 +1,8 @@
+{
+  imports = [
+    "${builtins.fetchTarball "https://github.com/Mic92/sops-nix/archive/127a96f49ddc377be6ba76964411bab11ae27803.tar.gz"}/modules/sops"
+  ];
+
+  sops.defaultSopsFile = ./secrets.yaml;
+  sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+}