feat(secrets): enable secrets in er17x

r17x · Feb 9, 2024 · b7180a1 · b7180a1
1 parent 8f1dd20
commit b7180a1
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/flake.nix b/flake.nix
@@ -292,6 +292,20 @@
               ];
               homebrew.enable = true;
             }
+
+            home-manager.darwinModules.home-manager
+            ({ config, pkgs, ... }: {
+              home-manager.users.${config.users.primaryUser.username} = {
+                imports = singleton sops.homeManagerModule;
+                home.packages = [ pkgs.sops ];
+                sops.gnupg.home = "~/.gnupg";
+                sops.gnupg.sshKeyPaths = [ ];
+                sops.defaultSopsFile = ./secrets/secret.yaml;
+                # git diff integrations
+                programs.git.extraConfig.diff.sopsdiffer.textconv = "sops -d";
+              };
+            })
+
           ];
         };