oizys/hosts/algiz/secrets.nix
2025-02-20 10:08:54 -06:00

13 lines
308 B
Nix

{ ... }:
{
sops = {
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
defaultSopsFile = ./secrets.yaml;
# by default is accessible only by root:root which should work with above service
secrets.restic-algiz = { };
secrets.atticd-env = { };
secrets.harmonia-key = { };
};
}