Files
nixconfig/modules/server/sops/default.nix
soraefir 29a1702c39 Add sops
2026-05-06 01:33:48 +02:00

16 lines
508 B
Nix

{ config, lib, pkgs, ... }:
let
listNames = config.syscfg.server.db;
containerNames = lib.mapAttrsToList (name: cfg: name)
(lib.filterAttrs (name: cfg: cfg.db or false) config.syscfg.server.containers);
allApps = lib.unique (listNames ++ containerNames);
in{
config = lib.mkIf (config.syscfg.server.sops) {
sops.secrets.INFOMANIAK_API_KEY = { sopsFile = ./server.yaml; };
sops.secrets = lib.genAttrs (map (name: "${name}_pass") allApps) (name: {
owner = "postgres";
});
};
}