nix-config/modules/traffic-stop-box/secrets.nix

8 lines
264 B
Nix

{ config, self, registry, ... }:
{
sops.defaultSopsFile = self + /secrets/${registry.hostName}/secrets.yaml;
sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
sops.secrets.telegram-decoder-token.owner = config.users.users.telegram-decoder.name;
}