os/mixin/sops.nix — radicle-infra

rad:z254T5p17bdFPmzfDojsdjo4HjpoZ

Radicle Infrastructure as Code (NixOS, OpenTofu, …)

.. cache.nix common.nix disk-config.nix kmscon.nix motd.nix nix.nix radicle-permissive.nix radicle-stats.nix radicle.nix sops.nix ssh.nix tor.nix users.nix

{
  config,
  pkgs,
  ...
}: {
  sops.age.sshKeyPaths = map (x: x.path) (builtins.filter (x: x.type == "ed25519") config.services.openssh.hostKeys);

  environment.systemPackages = with pkgs; [
    age
    sops
    ssh-to-age
  ];
}