refactor: adopt modular secrets approach

2026-03-13 23:03:59 +01:00
parent 3f9c9cd154
commit 916e732ce6
14 changed files with 212 additions and 161 deletions
--- a/utils/default.nix
+++ b/utils/default.nix
@@ -10,4 +10,16 @@
      import (hostDir + "/meta.nix")
    else
      throw "meta.nix required in ${hostDir}";
+
+  sopsAvailability =
+    config: osConfig:
+    let
+      hmSopsAvailable = config ? sops && config.sops ? secrets;
+      osSopsAvailable = osConfig != null && osConfig ? sops && osConfig.sops ? secrets;
+    in
+    {
+      available = hmSopsAvailable || osSopsAvailable;
+      secrets = if hmSopsAvailable then config.sops.secrets else osConfig.sops.secrets;
+      templates = if hmSopsAvailable then config.sops.templates else osConfig.sops.templates;
+    };
 }