18 lines
468 B
Nix
18 lines
468 B
Nix
|
{ lib, config, secretsPath, ... }:
|
||
|
|
let
|
||
|
|
inherit (builtins) mapAttrs;
|
||
|
|
inherit (lib.my) mkOpt';
|
||
|
|
|
||
|
|
cfg = config.my.secrets;
|
||
|
|
in
|
||
|
|
{
|
||
|
|
options.my.secrets = with lib.types; {
|
||
|
|
key = mkOpt' (nullOr str) null "Public key that secrets for this system should be encrypted for.";
|
||
|
|
files = mkOpt' (attrsOf unspecified) { } "Secrets to decrypt with agenix.";
|
||
|
|
};
|
||
|
|
|
||
|
|
config.age.secrets = mapAttrs (f: opts: {
|
||
|
|
file = "${secretsPath}/${f}.age";
|
||
|
|
} // opts) cfg.files;
|
||
|
|
}
|