36 lines
842 B
Nix
36 lines
842 B
Nix
{
|
|
sops.secrets = let
|
|
loadYamlKey = key: sopsFile: overrides:
|
|
{
|
|
inherit sopsFile key;
|
|
format = "yaml";
|
|
}
|
|
// overrides;
|
|
in {
|
|
wireguard-privatekey = {
|
|
format = "binary";
|
|
sopsFile = ./wireguard-private;
|
|
owner = "systemd-network";
|
|
};
|
|
restic-password = {
|
|
format = "binary";
|
|
sopsFile = ./restic-password;
|
|
};
|
|
cloudflare = {
|
|
format = "binary";
|
|
sopsFile = ./cloudflare;
|
|
};
|
|
nebula-cert = loadYamlKey "nebula-cert" ./nebula.yaml {
|
|
group = "nebula-xunmesh";
|
|
mode = "0644";
|
|
};
|
|
nebula-key = loadYamlKey "nebula-key" ./nebula.yaml {
|
|
group = "nebula-xunmesh";
|
|
mode = "0644";
|
|
};
|
|
nebula-ca-cert = loadYamlKey "nebula-ca-cert" ./nebula.yaml {
|
|
group = "nebula-xunmesh";
|
|
mode = "0644";
|
|
};
|
|
};
|
|
}
|