oizys/hosts/othalan/default.nix
2024-12-04 08:59:20 -06:00

49 lines
1 KiB
Nix

{
enabled,
enableAttrs,
listify,
config,
...
}:
{
oizys =
{
nix-ld = enabled // {
overkill = enabled;
};
languages = "misc|nim|node|nushell|python|tex" |> listify;
}
// (
''
desktop
hyprland
chrome
vpn
backups
llm
hp-scanner
vbox
podman
docker
''
|> listify
|> enableAttrs
);
sops = {
defaultSopsFile = ./secrets.yaml;
# This will automatically import SSH keys as age keys
age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
secrets.mullvad-userpass = { };
secrets."mullvad_ca.crt" = { };
secrets.restic-othalan = {
# Permission modes are in octal representation (same as chmod),
mode = "0440";
# It is recommended to get the group/name name from
# `config.users.users.<?name>.{name,group}` to avoid misconfiguration
owner = config.users.users.daylin.name;
group = config.users.users.daylin.group;
};
};
}