24 lines
607 B
Nix
24 lines
607 B
Nix
{ lib, config, ... }:
|
|
let
|
|
sops = config.maid.sops;
|
|
in
|
|
{
|
|
options.maid.sops = {
|
|
enable = lib.mkEnableOption "sops";
|
|
work.enable = lib.mkEnableOption "work secrets";
|
|
viendesu.enable = lib.mkEnableOption "VienDesu! secrets";
|
|
};
|
|
|
|
config.sops.secrets = lib.mkIf sops.enable (lib.mkMerge [
|
|
{ sops.defaultSopsFile = ../secrets/secrets.yaml; }
|
|
(lib.mkIf sops.work.enable {
|
|
"work/vpn/ovpn" = {};
|
|
"work/vpn/shadowsocks" = {};
|
|
"work/vpn/password" = {};
|
|
})
|
|
(lib.mkIf sops.viendesu.enable {
|
|
"shadowsocks/gneg" = {};
|
|
"shadowsocks/yor" = {};
|
|
})
|
|
]);
|
|
}
|