oizys/hosts/othalan/default.nix

{
  enabled,
  enableAttrs,
  listify,
  config,
  ...
}:
{

  oizys =
    {
      nix-ld = enabled // {
        overkill = enabled;
      };
      languages = "misc|nim|node|nushell|python|tex" |> listify;
    }
    // (
      ''
        desktop
        hyprland
        chrome
        vpn
        backups
        llm
        hp-scanner
        vbox
        podman
        docker
        utils
      ''
      |> listify
      |> enableAttrs
    );

  sops = {
    defaultSopsFile = ./secrets.yaml;

    # This will automatically import SSH keys as age keys
    age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
    secrets.mullvad-userpass = { };
    secrets."mullvad_ca.crt" = { };
    secrets.restic-othalan = {
      # Permission modes are in octal representation (same as chmod),
      mode = "0440";
      # It is recommended to get the group/name name from
      # `config.users.users.<?name>.{name,group}` to avoid misconfiguration
      owner = config.users.users.daylin.name;
      group = config.users.users.daylin.group;
    };
  };
}