summaryrefslogtreecommitdiffstats
path: root/sys/secrets/default.nix
diff options
context:
space:
mode:
authorSoispha <soispha@vhack.eu>2023-08-26 23:42:21 +0200
committerSoispha <soispha@vhack.eu>2023-08-26 23:42:21 +0200
commit3f600ab07dbad3b6dd7655587ddea158b19aea71 (patch)
tree7164ccd965e1d14ade970aeb8eb188b1442a6c91 /sys/secrets/default.nix
parentStyle(treewide): Format all lua-files makes lua ➛ nix easier (diff)
downloadnixos-config-3f600ab07dbad3b6dd7655587ddea158b19aea71.zip
Refactor(treewide): Abbreviate path names
Diffstat (limited to 'sys/secrets/default.nix')
-rw-r--r--sys/secrets/default.nix32
1 files changed, 32 insertions, 0 deletions
diff --git a/sys/secrets/default.nix b/sys/secrets/default.nix
new file mode 100644
index 00000000..d1fc1714
--- /dev/null
+++ b/sys/secrets/default.nix
@@ -0,0 +1,32 @@
+{
+ config,
+ lib,
+ ...
+}: let
+ name = config.networking.hostName;
+in {
+ config = lib.mkIf config.soispha.secrets.enable {
+ age = {
+ secrets = {
+ nheko = {
+ file = ./nheko/conf. + name;
+ mode = "700";
+ owner = "soispha";
+ group = "users";
+ };
+ serverphoneCa = {
+ file = ./serverphone/ca.key;
+ mode = "700";
+ owner = "serverphone";
+ group = "serverphone";
+ };
+ serverphoneServer = {
+ file = ./serverphone/server.key;
+ mode = "700";
+ owner = "serverphone";
+ group = "serverphone";
+ };
+ };
+ };
+ };
+}