22 lines
596 B
Nix
22 lines
596 B
Nix
{
|
|
name = "secrets";
|
|
|
|
nodes.machine =
|
|
{ self, config, ... }:
|
|
{
|
|
environment.etc."privkey.age".source = ./key.age;
|
|
imports = [ (self.nixosModules.clanCore) ];
|
|
environment.etc."secret".source = config.sops.secrets.secret.path;
|
|
environment.etc."group-secret".source = config.sops.secrets.group-secret.path;
|
|
sops.age.keyFile = "/etc/privkey.age";
|
|
|
|
clan.core.settings.directory = "${./.}";
|
|
|
|
networking.hostName = "machine";
|
|
};
|
|
testScript = ''
|
|
machine.succeed("cat /etc/secret >&2")
|
|
machine.succeed("cat /etc/group-secret >&2")
|
|
'';
|
|
}
|