Oeh, will this work...?

This commit is contained in:
Root User 2026-02-07 18:16:35 +01:00
parent a110fa37bc
commit fc1ab7ce9c
Signed by: root
GPG key ID: 087F0A95E5766D72
3 changed files with 20 additions and 18 deletions

View file

@ -15,18 +15,16 @@
}}/modules/sops"
];
# This will add secrets.yml to the nix store
# You can avoid this by adding a string to the full path instead, i.e.
# sops.defaultSopsFile = "/root/.sops/secrets/example.yaml";
sops.defaultSopsFile = ../../secrets/songsheet/secrets.yaml;
# This will automatically import SSH keys as age keys
sops.age.sshKeyPaths = [ "/home/songsheetprg/.ssh/id_ed25519.pub" ];
# This is using an age key that is expected to already be in the filesystem
sops.age.keyFile = "/var/lib/sops-nix/key.txt";
# This will generate a new key if the key specified above does not exist
sops.age.generateKey = true;
# Use the flat key name with quotes
sops.secrets."songsheet/database" = {
key = "songsheet/database";
};
}
# This will add secrets.yml to the nix store
# You can avoid this by adding a string to the full path instead, i.e.
# sops.defaultSopsFile = "/root/.sops/secrets/example.yaml";
sops.defaultSopsFile = ../../secrets/songsheet/secrets.yaml;
# This will automatically import SSH keys as age keys
sops.age.sshKeyPaths = ["/home/songsheetprg/.ssh/id_ed25519.pub"];
# This is using an age key that is expected to already be in the filesystem
sops.age.keyFile = "/var/lib/sops-nix/key.txt";
# This will generate a new key if the key specified above does not exist
sops.age.generateKey = true;
# Use the flat key name with quotes
sops.secrets."songsheet/database" = {};
}