31 lines
636 B
Nix
31 lines
636 B
Nix
{
|
|
config,
|
|
lib,
|
|
self,
|
|
...
|
|
}: let
|
|
inherit (lib) mkIf;
|
|
|
|
host = config.ooknet.host;
|
|
admin = host.admin;
|
|
tailscale = host.networking.tailscale;
|
|
in {
|
|
age.identityPaths = [
|
|
"/home/${admin.name}/.ssh/id_ed25519"
|
|
];
|
|
|
|
age.secrets = {
|
|
tailscale-auth = mkIf tailscale.enable {
|
|
file = "${self}/secrets/tailscale-auth.age";
|
|
owner = "${admin.name}";
|
|
group = "users";
|
|
mode = "400";
|
|
};
|
|
github_key = mkIf admin.homeManager {
|
|
file = "${self}/secrets/github_key.age";
|
|
path = "/home/${admin.name}/.ssh/github_key";
|
|
owner = "${admin.name}";
|
|
group = "users";
|
|
};
|
|
};
|
|
}
|