refactor(secrets): simplify secrets

This commit is contained in:
2026-04-20 19:17:37 +02:00
parent b62f3c20ac
commit 72c3710a3c
9 changed files with 87 additions and 80 deletions

View File

@@ -1,14 +1,13 @@
{
lib,
config,
myUtils,
...
}:
let
cfg = config.hcloud;
inherit (config.host) username;
inherit (config.secrets) sopsDir;
inherit (config.secrets) owner;
in
{
options.hcloud = {
@@ -16,12 +15,10 @@ in
};
config = lib.mkIf cfg.enable {
sops.secrets = myUtils.mkSopsSecrets sopsDir "hcloud" [ "api-token" ] {
owner = config.users.users.${username}.name;
};
secrets.groups.hcloud = [ "api-token" ];
sops.templates."hcloud/cli.toml" = {
owner = config.users.users.${username}.name;
inherit owner;
path = "/home/${username}/.config/hcloud/cli.toml";
content = ''
active_context = "server"