modules/nixos/server/secrets.nix


1
2
3
4
5
6
7
8
9
10
11
12

{config, ...}: {
  age = let
    baseDir = ../../../secrets/systems/${config.networking.hostName};
  in {
    identityPaths = ["/etc/age/key"];

    secrets = {
      rootPassword.file = "${baseDir}/rootPassword.age";
      userPassword.file = "${baseDir}/userPassword.age";
    };
  };
}