mirror of
https://github.com/ellmau/nixos.git
synced 2025-12-19 09:29:36 +01:00
17 lines
488 B
Nix
17 lines
488 B
Nix
{ pkgs ? import <nixpkgs> { }, sops-nix ? pkgs.callPackage <sops-nix> { }
|
|
, name ? "secrets", ... }:
|
|
let
|
|
sops-rekey = pkgs.writeShellScriptBin "sops-rekey" ''
|
|
${pkgs.findutils}/bin/find . -wholename '*/secrets/*.yaml' -exec ${pkgs.sops}/bin/sops updatekeys {} \;
|
|
'';
|
|
in pkgs.mkShell {
|
|
sopsPGPKeyDirs = [ ./keys/users ./keys/hosts ];
|
|
name = name;
|
|
nativeBuildInputs = [
|
|
sops-nix.sops-import-keys-hook
|
|
sops-nix.ssh-to-pgp
|
|
sops-rekey
|
|
pkgs.wireguard-tools
|
|
];
|
|
}
|