Refactor git credentials secrets
Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>
This commit is contained in:
38
hosts/elara/users/nikara/configs/console/gpg/default.nix
Normal file
38
hosts/elara/users/nikara/configs/console/gpg/default.nix
Normal file
@@ -0,0 +1,38 @@
|
||||
{
|
||||
user ? throw "user argument is required",
|
||||
home ? throw "home argument is required",
|
||||
}:
|
||||
{ config, ... }:
|
||||
let
|
||||
hmConfig = config.home-manager.users.${user};
|
||||
in
|
||||
{
|
||||
home-manager.users.${user} = {
|
||||
sops.secrets = {
|
||||
"gpg/personal/key" = {
|
||||
sopsFile = ../../../../../../../secrets/personal/secrets.yaml;
|
||||
key = "gpg/key";
|
||||
};
|
||||
|
||||
"gpg/personal/pass" = {
|
||||
sopsFile = ../../../../../../../secrets/personal/secrets.yaml;
|
||||
key = "gpg/pass";
|
||||
};
|
||||
|
||||
"gpg/sas/key" = {
|
||||
sopsFile = ../../../../../../../secrets/sas/secrets.yaml;
|
||||
key = "gpg/key";
|
||||
};
|
||||
|
||||
"gpg/sas/pass" = {
|
||||
sopsFile = ../../../../../../../secrets/sas/secrets.yaml;
|
||||
key = "gpg/pass";
|
||||
};
|
||||
};
|
||||
|
||||
programs.clipbook.bookmarks = {
|
||||
"Personal GPG Passphrase".source = hmConfig.sops.secrets."gpg/personal/pass".path;
|
||||
"SAS GPG Passphrase".source = hmConfig.sops.secrets."gpg/sas/pass".path;
|
||||
};
|
||||
};
|
||||
}
|
Reference in New Issue
Block a user