chore: refactored sops secrets

This commit is contained in:
Nick 2025-11-28 20:35:50 -06:00
parent 60c469ee7f
commit 9df4b8c8a0
13 changed files with 47 additions and 42 deletions

View file

@ -9,7 +9,7 @@ in
wireguard.interfaces = {
wg0 = {
ips = [ "${mars.wireguard.ip0}/32" ];
privateKeyFile = config.sops.secrets."${service.name}-mars-private".path;
privateKeyFile = config.sops.secrets."${service.name}/mars-private".path;
};
};
};
@ -17,7 +17,7 @@ in
sops =
let
sopsPath = secret: {
path = "${service.sops.path0}/${service.name}-${secret}-pass";
path = "${service.sops.path0}/${service.name}-${secret}";
owner = "root";
mode = "600";
};
@ -26,7 +26,7 @@ in
secrets = builtins.listToAttrs (
map
(secret: {
name = "${service.name}-${secret}";
name = "${service.name}/${secret}";
value = sopsPath secret;
})
[