oizys/hosts/algiz/secrets.nix
2025-01-31 10:40:49 -06:00

12 lines
276 B
Nix

{ ... }:
{
sops = {
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
defaultSopsFile = ./secrets.yaml;
# by default is accessible only by root:root which should work with above service
secrets.restic-algiz = { };
secrets.atticd-env = { };
};
}