feat(flake)!: move agenix-rekey
module to auto.configurations
This commit is contained in:
parent
10a013d6a6
commit
52d28e5001
2 changed files with 3 additions and 0 deletions
13
modules/flake/configurations/agenix-rekey/default.nix
Normal file
13
modules/flake/configurations/agenix-rekey/default.nix
Normal file
|
@ -0,0 +1,13 @@
|
|||
{ inputs, lib, pkgs, config, options, ... }:
|
||||
{
|
||||
config = {
|
||||
# NOTE: `(r)agenix` and `agenix-rekey` modules are imported by `../../../modules/flake/configurations.nix`
|
||||
age.rekey = {
|
||||
# NOTE: defined in `meta.nix`
|
||||
# hostPubkey = null;
|
||||
masterIdentities = lib.mkDefault [ "${inputs.self}/secrets/privkey.age" ];
|
||||
storageMode = lib.mkDefault "local";
|
||||
localStorageDir = lib.mkDefault "${inputs.self}/secrets/rekeyed/${config.networking.hostName}";
|
||||
};
|
||||
};
|
||||
}
|
|
@ -63,6 +63,7 @@ let
|
|||
(lib.optionalAttrs (meta ? pubkey) {
|
||||
age.rekey.hostPubkey = meta.pubkey;
|
||||
})
|
||||
./agenix-rekey
|
||||
# nix-topology
|
||||
inputs.nix-topology.nixosModules.default
|
||||
# Sane default `networking.hostName`
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue