68 lines
1.6 KiB
Nix
68 lines
1.6 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
inputs,
|
|
pkgs,
|
|
self,
|
|
...
|
|
}: let
|
|
inherit (lib) mkIf mkEnableOption mkOption mkMerge;
|
|
cfg = config.nixos.services.agenix;
|
|
in {
|
|
options = {
|
|
nixos.services.agenix = {
|
|
enable = mkEnableOption "Enables agenix system environment";
|
|
cnixtop.enable = mkOption {
|
|
type = lib.types.bool;
|
|
default = false;
|
|
description = "Apply cnix agenix settings";
|
|
};
|
|
toothpc.enable = mkOption {
|
|
type = lib.types.bool;
|
|
default = false;
|
|
description = "Apply toothpc agenix settings";
|
|
};
|
|
cnixpad.enable = mkOption {
|
|
type = lib.types.bool;
|
|
default = false;
|
|
description = "Apply cnixpad agenix settings";
|
|
};
|
|
};
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
age = mkMerge [
|
|
(mkIf cfg.cnixtop.enable {
|
|
secrets = {
|
|
cnstssh.file = "${self}/secrets/cnstssh.age";
|
|
cnixssh.file = "${self}/secrets/cnixssh.age";
|
|
certpem.file = "${self}/secrets/certpem.age";
|
|
keypem.file = "${self}/secrets/keypem.age";
|
|
mailpwd.file = "${self}/secrets/mailpwd.age";
|
|
gcapi = {
|
|
file = "${self}/secrets/gcapi.age";
|
|
owner = "cnst";
|
|
};
|
|
};
|
|
})
|
|
(mkIf cfg.toothpc.enable {
|
|
secrets = {
|
|
# Add toothpc specific secrets here
|
|
};
|
|
})
|
|
(mkIf cfg.cnixpad.enable {
|
|
secrets = {
|
|
# Add adampad specific secrets here
|
|
};
|
|
})
|
|
];
|
|
|
|
environment = {
|
|
systemPackages = [
|
|
inputs.agenix.packages.x86_64-linux.default
|
|
pkgs.age
|
|
];
|
|
};
|
|
};
|
|
}
|