Refactor secrets

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>

hosts/installer/users/nick/configs/console/git/default.nix

@@ -15,9 +15,9 @@ in
     sops = {
       secrets = {
         "git/credentials/git.karaolidis.com/admin/username".sopsFile =
-          ../../../../../../../secrets/personal/secrets.yaml;
+          "${inputs.secrets}/personal/secrets.yaml";
         "git/credentials/git.karaolidis.com/admin/password".sopsFile =
-          ../../../../../../../secrets/personal/secrets.yaml;
+          "${inputs.secrets}/personal/secrets.yaml";
       };
 
       templates."git/credentials" = {

hosts/installer/users/nick/configs/console/gpg/default.nix

@@ -1,8 +1,8 @@
 { user, home }:
-{ ... }:
+{ inputs, ... }:
 {
   home-manager.users.${user}.sops.secrets = {
-    "gpg/key".sopsFile = ../../../../../../../secrets/personal/secrets.yaml;
-    "gpg/pass".sopsFile = ../../../../../../../secrets/personal/secrets.yaml;
+    "gpg/key".sopsFile = "${inputs.secrets}/personal/secrets.yaml";
+    "gpg/pass".sopsFile = "${inputs.secrets}/personal/secrets.yaml";
   };
 }

hosts/installer/users/nick/configs/console/ssh/default.nix

@@ -1,14 +1,14 @@
 { user, home }:
-{ ... }:
+{ inputs, ... }:
 {
   home-manager.users.${user} = {
     sops.secrets = {
       "ssh/key" = {
-        sopsFile = ../../../../../../../secrets/personal/secrets.yaml;
+        sopsFile = "${inputs.secrets}/personal/secrets.yaml";
         path = "${home}/.ssh/ssh_personal_ed25519_key";
       };
 
-      "ssh/pass".sopsFile = ../../../../../../../secrets/personal/secrets.yaml;
+      "ssh/pass".sopsFile = "${inputs.secrets}/personal/secrets.yaml";
     };
 
     programs.ssh.matchBlocks = {

hosts/installer/users/nick/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, ... }:
+{
+  config,
+  lib,
+  inputs,
+  ...
+}:
 let
   # FIXME: https://github.com/NixOS/nixpkgs/issues/24570
   # FIXME: https://github.com/NixOS/nixpkgs/issues/305643
@@ -41,7 +46,7 @@ in
 
   # mkpasswd -s
   sops.secrets."${user}-password" = {
-    sopsFile = ../../../../secrets/personal/secrets.yaml;
+    sopsFile = "${inputs.secrets}/personal/secrets.yaml";
     key = "password";
     neededForUsers = true;
   };