From 09630d91bc5e0ee8d082aa470761352d2d149eba Mon Sep 17 00:00:00 2001
From: Benedikt Peetz <benedikt.peetz@b-peetz.de>
Date: Fri, 16 May 2025 18:10:15 +0200
Subject: modules/age: Init

---
 modules/by-name/ag/age/module.nix | 25 +++++++++++++++++++++++++
 modules/common/default.nix        |  1 +
 2 files changed, 26 insertions(+)
 create mode 100644 modules/by-name/ag/age/module.nix

(limited to 'modules')

diff --git a/modules/by-name/ag/age/module.nix b/modules/by-name/ag/age/module.nix
new file mode 100644
index 00000000..9de1f076
--- /dev/null
+++ b/modules/by-name/ag/age/module.nix
@@ -0,0 +1,25 @@
+{
+  config,
+  lib,
+  modules,
+  pkgs,
+  ...
+}: let
+  cfg = config.soispha.age;
+in {
+  options.soispha.age = {
+    enable = lib.mkEnableOption "secret management with age";
+  };
+
+  imports = [
+    modules.agenix.nixosModules.default
+  ];
+
+  config = lib.mkIf cfg.enable {
+    arg = {
+      # TODO(@bpeetz): Set once <https://github.com/ryantm/agenix/pull/317/files> is merged. <2025-05-16>
+      # enable = true;
+      ageBin = lib.getExe pkgs.rage;
+    };
+  };
+}
diff --git a/modules/common/default.nix b/modules/common/default.nix
index 19fbd591..08a46acf 100644
--- a/modules/common/default.nix
+++ b/modules/common/default.nix
@@ -16,6 +16,7 @@
   ...
 }: {
   soispha = {
+    age.enable = true;
     boot.enable = true;
     cleanup.enable = true;
     documentation.enable = true;
-- 
cgit 1.4.1