modules/nixos+darwin: move to traits + archetypes model

1 files changed, 17 insertions, 0 deletions

diff --git a/modules/nixos/traits/secrets.nix b/modules/nixos/traits/secrets.nix
new file mode 100644
index 0000000..085d8f3
--- /dev/null
+++ b/modules/nixos/traits/secrets.nix
@@ -0,0 +1,17 @@
+{
+  config,
+  lib,
+  ...
+}: let
+  cfg = config.traits.secrets;
+in {
+  options.traits.secrets = {
+    enable = lib.mkEnableOption "secrets management";
+  };
+
+  config = lib.mkIf cfg.enable {
+    age = {
+      identityPaths = ["/etc/age/key"];
+    };
+  };
+}