wip: secrets

2026-04-11 20:48:47 +02:00
parent e2a26198f0
commit 631ad0d146
13 changed files with 172 additions and 92 deletions
--- a/modules/hcloud/default.nix
+++ b/modules/hcloud/default.nix
@@ -1,6 +1,7 @@
 {
  lib,
  config,
+  myUtils,
  ...
 }:

@@ -18,8 +19,7 @@ in
  };

  config = lib.mkIf cfg.enable {
-    sops.secrets.hcloud-token = {
-      sopsFile = "${sopsDir}/hcloud-token";
+    sops.secrets = myUtils.mkSopsSecrets sopsDir "hcloud" [ "api-token" ] {
      owner = config.users.users.${cfg.username}.name;
    };

@@ -31,7 +31,7 @@ in

        [[contexts]]
          name = "server"
-          token = "${config.sops.placeholder.hcloud-token}"
+          token = "${config.sops.placeholder."hcloud/api-token"}"
      '';
    };
  };