32 lines
800 B
Nix
32 lines
800 B
Nix
{ lib }:
|
|
|
|
{
|
|
mkSopsSecrets =
|
|
sopsDir: group: names: extraOpts:
|
|
let
|
|
file = "${group}.yaml";
|
|
in
|
|
lib.foldl' lib.mergeAttrs { } (
|
|
map (name: {
|
|
"${group}/${name}" = {
|
|
sopsFile = "${sopsDir}/${file}";
|
|
key = name;
|
|
}
|
|
// extraOpts;
|
|
}) names
|
|
);
|
|
|
|
sopsAvailability =
|
|
config: osConfig:
|
|
let
|
|
osSopsAvailable = osConfig != null && osConfig ? sops && osConfig.sops ? secrets;
|
|
hmSopsAvailable = config ? sops && config.sops ? secrets;
|
|
preferOs = osSopsAvailable;
|
|
in
|
|
{
|
|
available = osSopsAvailable || hmSopsAvailable;
|
|
secrets = if preferOs then osConfig.sops.secrets else config.sops.secrets;
|
|
templates = if preferOs then osConfig.sops.templates else config.sops.templates;
|
|
};
|
|
}
|