martin/dot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add sops env var

Browse Source
This commit is contained in:
Martin Pander
2026-02-07 16:28:40 +01:00
parent 3bdd7e1c50
commit bd3e120fb0
3 changed files with 16 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
nix/modules/home/secrets.nix
View File

@@ -13,4 +13,8 @@
keyFile = "${config.home.homeDirectory}/.config/sops/age/keys.txt"; keyFile = "${config.home.homeDirectory}/.config/sops/age/keys.txt";
}; };
}; };
home.sessionVariables = {
SOPS_AGE_KEY_FILE = config.sops.age.keyFile;
};
} }

2
nix/secrets/.sops.yaml
View File

@@ -1,6 +1,6 @@
keys: keys:
- &macbook age1hmgy68ukugduef75ev72jnpu77ff3lajadpf7u0zv3ex4nt7f5qs5nxx2l - &macbook age1hmgy68ukugduef75ev72jnpu77ff3lajadpf7u0zv3ex4nt7f5qs5nxx2l
- &macnix age1436laad6dysegssvnz3pm8m33tv6hl9xpqymslehfwjqr8c6hfwsn74u42 - &macnix age1yez9q5q94kt99d9q8eqgqrkz7djmk3kwsqdjp7ww7e0fquzjevpsjkk5x4
creation_rules: creation_rules:
- path_regex: secrets\.yaml$ - path_regex: secrets\.yaml$

22
nix/secrets/secrets.yaml
View File

@@ -4,20 +4,20 @@ sops:
- recipient: age1hmgy68ukugduef75ev72jnpu77ff3lajadpf7u0zv3ex4nt7f5qs5nxx2l - recipient: age1hmgy68ukugduef75ev72jnpu77ff3lajadpf7u0zv3ex4nt7f5qs5nxx2l
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKNGdIVU9CRnJGVVdkREsw YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxUEZwYkFDYVd4ek53QU13
OFNiS2tFQmRoUHZiZFR0Z1RVaExSaXZwejBJCk44MWJSalFvckNqckNxZUJGdFpT YStKbEVOeTJaalVIWXh1SUlrSnUzanM0anpBCktBMytXQUNyOTZaZGc4NG1Ta1lX
VlV2eisySzl2aGJVL1hSZ25FMWtTWmMKLS0tIEVvODJxSG1ScllmRC93MHN0MVdZ Mi91UWxXZWZjRDZqNDJWQU1YODgzUkkKLS0tIFY4TjUyczQ0SGZMOUM0NkQvUC94
YW12MmkweUF3TWtiSTVyWkIvdGdXQXMKsEMlf2FRKxSvaaCaBGf3kM5MdsL571aq WDBpdDJMaWVvUGZUcXZLZE9oYjdKLzgK4B25MbF/3bUFJ5+zxUfpSNM79HT13nux
sITsqoVo+J7CV0XdPjVpctHwSBNMlLUGJh+dM5+Rb96FUqVr9dpEIw== dvlcwkwYKIkS9YZpnyiYXZGupFhUcq1ipIvsbq/B3WR9IFn4xromPw==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
- recipient: age1436laad6dysegssvnz3pm8m33tv6hl9xpqymslehfwjqr8c6hfwsn74u42 - recipient: age1yez9q5q94kt99d9q8eqgqrkz7djmk3kwsqdjp7ww7e0fquzjevpsjkk5x4
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUd0x4MDhVMmhISnN0eFZz YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvK0lsajZ1b3dlMVA4Z2hm
c1c2emxRcFVLRWZDSkp2V1VYQUpUbXU3ZFJZCkN1VVRzR2VBeThMckFRZk9ZdFdE ek9lZENNYnVnQXp2U0hGM2pDd0FSL2JVbVhVClZUTWhNcmJadSttU2UrRVhTWU1y
czhpb0hybCsxUlJ4WmlXb0pPOG5JaHMKLS0tIDBCR29zbjVpNFJZWVNrSldxT08z RVV6NlpndEsyYk9zSmRqLytOWUtCNWMKLS0tIGN1TDJPY2orMGJobFExUEhWYzdx
TEsvV3l2TEJqUWdVL2krOXlNaXlpR0EKMIaLbDOAx2Zw1rtNT6HSli3Yqw2rFnsa dDB3YWVlbUY4V25pa0IvTW1xNG1XcmMK+LLoW8f+M0eBIyxwI3tD637Fw/FuXmYx
6p5fa97RSDewFhg4MvaVo2L8SVpef65idmRXQ2Eh/ls4tbcpN8r6MA== RV/hAOaznmfq3filh9KAEA+A/9mDI2lUeF/ye/g27tEEVtNRF9H+Dg==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2026-02-07T15:11:34Z" lastmodified: "2026-02-07T15:11:34Z"
mac: ENC[AES256_GCM,data:Pgi9tYWnrMrlM9NjqDy0+BrH51/0T4c7M6dornLCumnRtR2Y3MZYGyA2E97kbwuqoPJCOWkzhJt7smwCRI+H0rXveO+ps+v5iUxzP+7MQmepn5wjS32HoL5c2Oer4CR7PkKY7YvL7z5IT6QcIgRXMODhsVbWgB8CjPrn/GYqb5Y=,iv:A2AyCNHfQEdx/wvUJQGc9ndL2/OYGGxBMidYOTHXO7Q=,tag:9uzJcu3bogQgVj0bDOPCwg==,type:str] mac: ENC[AES256_GCM,data:Pgi9tYWnrMrlM9NjqDy0+BrH51/0T4c7M6dornLCumnRtR2Y3MZYGyA2E97kbwuqoPJCOWkzhJt7smwCRI+H0rXveO+ps+v5iUxzP+7MQmepn5wjS32HoL5c2Oer4CR7PkKY7YvL7z5IT6QcIgRXMODhsVbWgB8CjPrn/GYqb5Y=,iv:A2AyCNHfQEdx/wvUJQGc9ndL2/OYGGxBMidYOTHXO7Q=,tag:9uzJcu3bogQgVj0bDOPCwg==,type:str]