Files
nixconfig/modules/server/sops/default.nix
2026-05-08 20:46:23 +02:00

16 lines
526 B
Nix

{ config, lib, pkgs, ... }:
let
listNames = config.syscfg.server.db;
containerNames = lib.mapAttrsToList (name: cfg: name)
(lib.filterAttrs (name: cfg: cfg.db or cfg.sops or false) config.syscfg.server.containers);
allApps = lib.unique (listNames ++ containerNames);
in{
sops.secrets = {
INFOMANIAK_API_KEY = { sopsFile = ./server.yaml; };
} // (lib.genAttrs (map (name: "${lib.toUpper name}") allApps) (name: {
owner = "postgres";
mode = "0644";
sopsFile = ./server.yaml;
}));
}