mirror of
https://github.com/tuxdotrs/tawm.git
synced 2025-07-05 20:56:33 +05:30
21 lines
410 B
Nix
21 lines
410 B
Nix
{
|
|
inputs,
|
|
config,
|
|
pkgs,
|
|
...
|
|
}: let
|
|
isEd25519 = k: k.type == "ed25519";
|
|
getKeyPath = k: k.path;
|
|
keys = builtins.filter isEd25519 config.services.openssh.hostKeys;
|
|
in {
|
|
imports = [inputs.sops-nix.nixosModules.sops];
|
|
|
|
sops.age = {
|
|
sshKeyPaths = map getKeyPath keys;
|
|
keyFile = "/var/lib/sops-nix/key.txt";
|
|
generateKey = true;
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [sops];
|
|
}
|