nixos-config/secrets/hopper/default.nix

55 lines
1.2 KiB
Nix

## TODO use defaultSopsFile mayb
{config, ...}: {
sops.secrets = {
wireguard = {
format = "binary";
sopsFile = ./wireguard;
};
discord-webhook = {
format = "binary";
owner = "alertmanager";
group = "alertmanager";
sopsFile = ./discord-webhook;
restartUnits = ["alertmanager.service"];
};
slskd = {
format = "binary";
sopsFile = ./slskd;
};
cloudflare = {
format = "binary";
sopsFile = ./cloudflare;
};
transmission = {
format = "binary";
sopsFile = ./transmission;
};
navidrome = {
format = "binary";
sopsFile = ./navidrome;
};
restic-password = {
format = "binary";
sopsFile = ./restic-password;
};
vaultwarden-env = {
format = "binary";
sopsFile = ./vaultwarden-env;
};
miniflux = {
format = "binary";
sopsFile = ./miniflux;
};
roblox-playtime = {
format = "binary";
sopsFile = ./roblox-playtime;
owner = "roblox-playtime";
group = "roblox-playtime";
};
samba-pass = {
format = "binary";
sopsFile = ./samba-pass;
mode = "0600";
};
};
}