modules/nixos/server/secrets.nix


1
2
3
4
5
6
7
8
9
10
11
12

{config, ...}: let
  baseDir = ../../../secrets/${config.networking.hostName};
in {
  age = {
    identityPaths = ["/etc/age/key"];

    secrets = {
      rootPassword.file = "${baseDir}/rootPassword.age";
      userPassword.file = "${baseDir}/userPassword.age";
    };
  };
}