Files
nixos/system/security.nix
T
2025-12-27 19:29:51 -06:00

32 lines
697 B
Nix

{
pkgs,
myConfig,
config,
...
}: {
security.pam.services.greetd.enableGnomeKeyring = true;
environment.systemPackages = with pkgs; [
sops
age
ssh-to-age
];
sops = {
defaultSopsFile = ../secrets/secrets.yaml;
age.keyFile = "/home/${myConfig.nixos.username}/.config/sops/age/keys.txt";
secrets = {
default_password = {
neededForUsers = true;
};
AVANTE_GEMINI_API_KEY = {
owner = "kenji";
};
};
};
programs.fish.interactiveShellInit = ''
if test -f ${config.sops.secrets.AVANTE_GEMINI_API_KEY.path}
set -gx AVANTE_GEMINI_API_KEY (cat ${config.sops.secrets.AVANTE_GEMINI_API_KEY.path})
end
'';
}