cleanup

secrets/hopper/default.nix

@@ -0,0 +1,48 @@
+## TODO use defaultSopsFile mayb
+{config, ...}: {
+  sops.secrets = {
+    wireguard = {
+      format = "binary";
+      sopsFile = ./wireguard;
+    };
+    slskd = {
+      format = "binary";
+      sopsFile = ./slskd;
+    };
+    cloudflare = {
+      format = "binary";
+      sopsFile = ./cloudflare;
+    };
+    transmission = {
+      format = "binary";
+      sopsFile = ./transmission;
+    };
+    navidrome = {
+      format = "binary";
+      sopsFile = ./navidrome;
+    };
+    restic-password = {
+      format = "binary";
+      sopsFile = ./restic-password;
+    };
+    vaultwarden-env = {
+      format = "binary";
+      sopsFile = ./vaultwarden-env;
+    };
+    miniflux = {
+      format = "binary";
+      sopsFile = ./miniflux;
+    };
+    roblox-playtime = {
+      format = "binary";
+      sopsFile = ./roblox-playtime;
+      owner = "roblox-playtime";
+      group = "roblox-playtime";
+    };
+    samba-pass = {
+      format = "binary";
+      sopsFile = ./samba-pass;
+      mode = "0600";
+    };
+  };
+}