TheWanderingCrow/CrOS
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

treewide format

Browse source
This commit is contained in:
TheWanderingCrow 2026-04-04 22:59:23 -04:00
parent 653eb2d606
commit b346790feb
31 changed files with 150 additions and 104 deletions
Download patch file Download diff file Expand all files Collapse all files

27
hosts/common/core/sops.nix
View file

@ -5,9 +5,11 @@
inputs,
config,
...
}: let
}:
let
sopsFolder = builtins.toString inputs.nix-secrets + "/sops";
in {
in
{
#the import for inputs.sops-nix.nixosModules.sops is handled in hosts/common/core/default.nix so that it can be dynamically input according to the platform
sops = {
@ -16,7 +18,7 @@ in {
validateSopsFiles = false;
age = {
# automatically import host SSH keys as age keys
sshKeyPaths = ["/etc/ssh/ssh_host_ed25519_key"];
sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
};
# secrets will be output to /run/secrets
# e.g. /run/secrets/msmtp-password
@ -49,13 +51,14 @@ in {
# The containing folders are created as root and if this is the first ~/.config/ entry,
# the ownership is busted and home-manager can't target because it can't write into .config...
# FIXME(sops): We might not need this depending on how https://github.com/Mic92/sops-nix/issues/381 is fixed
system.activationScripts.sopsSetAgeKeyOwnership = let
ageFolder = "${config.hostSpec.home}/.config/sops/age";
user = config.users.users.${config.hostSpec.username}.name;
group = config.users.users.${config.hostSpec.username}.group;
in ''
mkdir -p ${ageFolder} || true
chown -R ${user}:${group} ${config.hostSpec.home}/.config
'';
system.activationScripts.sopsSetAgeKeyOwnership =
let
ageFolder = "${config.hostSpec.home}/.config/sops/age";
user = config.users.users.${config.hostSpec.username}.name;
group = config.users.users.${config.hostSpec.username}.group;
in
''
mkdir -p ${ageFolder} || true
chown -R ${user}:${group} ${config.hostSpec.home}/.config
'';
}