diff options
| author | seth <[email protected]> | 2024-02-27 13:24:08 -0500 |
|---|---|---|
| committer | seth <[email protected]> | 2024-02-27 13:24:08 -0500 |
| commit | ee786af7dc2646fd141926ae153ab6ecb68065be (patch) | |
| tree | 45141a7de8edc44e1d0a3a715d78ddaaea7c00af /users/seth/nixos.nix | |
| parent | 82e202287f4f25afe411d93d2f437f0977c52570 (diff) | |
seth: reorganize system level imports
Diffstat (limited to 'users/seth/nixos.nix')
| -rw-r--r-- | users/seth/nixos.nix | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/users/seth/nixos.nix b/users/seth/nixos.nix new file mode 100644 index 0000000..fd65322 --- /dev/null +++ b/users/seth/nixos.nix @@ -0,0 +1,30 @@ +{ + config, + lib, + secretsDir, + ... +}: let + cfg = config.traits.users.seth; +in { + options.traits.users.seth = { + manageSecrets = + lib.mkEnableOption "automatic secrets management" + // { + default = config.traits.secrets.enable; + }; + }; + + imports = [./system.nix]; + + config = lib.mkMerge [ + (lib.mkIf (cfg.enable && cfg.manageSecrets) { + age.secrets = { + sethPassword.file = secretsDir + "/sethPassword.age"; + }; + + users.users.seth = { + hashedPasswordFile = lib.mkDefault config.age.secrets.sethPassword.path; + }; + }) + ]; +} |
