move zerotier secret generation into nixos module

nixosModules/clanCore/secrets/default.nix

@@ -9,6 +9,22 @@
       one would have to define system.clan.generateSecrets and system.clan.uploadSecrets
     '';
   };
+
+  options.clanCore.secretsDirectory = lib.mkOption {
+    type = lib.types.path;
+    description = ''
+      The directory where secrets are installed to. This is backend specific.
+    '';
+  };
+
+  options.clanCore.secretsPrefix = lib.mkOption {
+    type = lib.types.str;
+    default = "";
+    description = ''
+      Prefix for secrets. This is backend specific.
+    '';
+  };
+
   options.clanCore.secrets = lib.mkOption {
     default = { };
     type = lib.types.attrsOf
@@ -31,22 +47,33 @@
               The script is expected to generate all secrets and facts defined in the module.
             '';
           };
-          secrets = lib.mkOption {
-            type = lib.types.attrsOf (lib.types.submodule (secret: {
-              options = {
-                name = lib.mkOption {
-                  type = lib.types.str;
-                  description = ''
-                    name of the secret
-                  '';
-                  default = secret.config._module.args.name;
+          secrets =
+            let
+              config' = config;
+            in
+            lib.mkOption {
+              type = lib.types.attrsOf (lib.types.submodule ({ config, ... }: {
+                options = {
+                  name = lib.mkOption {
+                    type = lib.types.str;
+                    description = ''
+                      name of the secret
+                    '';
+                    default = config._module.args.name;
+                  };
+                  path = lib.mkOption {
+                    type = lib.types.str;
+                    description = ''
+                      path to a secret which is generated by the generator
+                    '';
+                    default = "${config'.clanCore.secretsDirectory}/${config'.clanCore.secretsPrefix}${config.name}";
+                  };
                 };
-              };
-            }));
-            description = ''
-              path where the secret is located in the filesystem
-            '';
-          };
+              }));
+              description = ''
+                path where the secret is located in the filesystem
+              '';
+            };
           facts = lib.mkOption {
             type = lib.types.attrsOf (lib.types.submodule (fact: {
               options = {

nixosModules/clanCore/secrets/password-store.nix

@@ -3,14 +3,8 @@ let
   passwordstoreDir = "\${PASSWORD_STORE_DIR:-$HOME/.password-store}";
 in
 {
-  options.clan.password-store.targetDirectory = lib.mkOption {
-    type = lib.types.path;
-    default = "/etc/secrets";
-    description = ''
-      The directory where the password store is uploaded to.
-    '';
-  };
   config = lib.mkIf (config.clanCore.secretStore == "password-store") {
+    clanCore.secretsDirectory = passwordstoreDir;
     system.clan.generateSecrets = pkgs.writeScript "generate-secrets" ''
       #!/bin/sh
       set -efu

nixosModules/clanCore/secrets/sops.nix

@@ -3,6 +3,7 @@ let
   secretsDir = config.clanCore.clanDir + "/sops/secrets";
   groupsDir = config.clanCore.clanDir + "/sops/groups";
 
+
   # My symlink is in the nixos module detected as a directory also it works in the repl. Is this because of pure evaluation?
   containsSymlink = path:
     builtins.pathExists path && (builtins.readFileType path == "directory" || builtins.readFileType path == "symlink");
@@ -22,7 +23,10 @@ let
 in
 {
   config = lib.mkIf (config.clanCore.secretStore == "sops") {
+    clanCore.secretsDirectory = "/run/secrets";
+    clanCore.secretsPrefix = config.clanCore.machineName + "-";
     system.clan = {
+
       generateSecrets = pkgs.writeScript "generate-secrets" ''
         #!${pkgs.python3}/bin/python
         import json