js0ny/dotfiles
1
0
Fork 0
mirror of https://github.com/js0ny/dotfiles.git synced 2025-12-21 08:43:00 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

nix: sops-nix

Browse source
This commit is contained in:
js0ny 2025-11-04 08:48:21 +00:00
parent 050799b77f
commit a32917bd22
6 changed files with 118 additions and 103 deletions
Download patch file Download diff file Expand all files Collapse all files

27
nixcfgs/users/js0ny/programs/sops.nix Normal file
View file

@ -0,0 +1,27 @@
{config, ...}: {
sops = {
# enable = true;
defaultSopsFile = ../../secrets/secrets.yaml;
age.keyFile = "${config.xdg.configHome}/sops/age/keys.txt";
age.generateKey = true;
secrets = {
"OPENROUTER_API_KEY" = {
key = "openrouter_api";
};
};
};
# home.sessionVariables = {
# OPENROUTER_API_KEY = config.sops.secrets."OPENROUTER_API_KEY".path;
# };
systemd.user.services.sops-envvar = {
Unit.Description = "[sops-envvar] Auto-source environment variables defined via sops-nix";
Service = {
ExecStart = pkgs.writeShellScript "start" ''
export OPENROUTER_API_KEY=$(cat ${config.sops.secrets."OPENROUTER_API_KEY".path})
'';
};
Install.WantedBy = ["default.target"];
};
}

26
nixcfgs/users/js0ny/zephyrus.nix
View file

@ -1,5 +1,9 @@
# ~/.config/nixcfgs/users/js0ny/default.nix
{...}: {
{
pkgs,
config,
...
}: {
imports = [
# General config
./default.nix
@ -56,5 +60,25 @@
../../modules/home/dev/verilog.nix
];
home.packages = with pkgs; [
rose-pine-cursor
];
sops = {
# enable = true;
defaultSopsFile = ../../secrets/secrets.yaml;
age.keyFile = "${config.xdg.configHome}/sops/age/keys.txt";
age.generateKey = true;
secrets = {
"OPENROUTER_API_KEY" = {
key = "openrouter_api";
};
};
};
home.sessionVariables = {
OPENROUTER_API_KEY = "$(cat ${config.sops.secrets."OPENROUTER_API_KEY".path})";
};
home.stateVersion = "25.05";
}