dotfiles/nixos-config
1
0
Fork 0
mirror of https://github.com/srid/nixos-config.git synced 2026-02-03 19:48:24 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

agenix

Browse source
This commit is contained in:
Sridhar Ratnakumar 2025-11-25 10:32:12 -05:00
parent adaf77b027
commit 1c7da4b883
3 changed files with 18 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

16
modules/home/agenix.nix Normal file
View file

@ -0,0 +1,16 @@
{ flake, config, ... }:
let
inherit (flake.inputs) agenix;
in
{
imports = [
agenix.homeManagerModules.default
];
# We use a separate SSH key for agenix decryption to avoid exposing the main
# private key (which is in 1Password) to the filesystem.
#
# To provision this key once:
# ssh-keygen -t ed25519 -f ~/.ssh/agenix
age.identityPaths = [ "${config.home.homeDirectory}/.ssh/agenix" ];
}

1
modules/home/default.nix
View file

@ -12,5 +12,6 @@
# ./cli/zellij.nix
./cli/just.nix
./services/ttyd.nix
./agenix.nix
];
}

4
modules/home/work/juspay.nix
View file

@ -7,12 +7,11 @@
{ flake, config, ... }:
let
inherit (flake) self;
inherit (flake.inputs) jumphost-nix agenix;
inherit (flake.inputs) jumphost-nix;
in
{
imports = [
"${jumphost-nix}/module.nix"
agenix.homeManagerModules.default
];
# https://github.com/srid/jumphost-nix
@ -41,7 +40,6 @@ in
# ANTHROPIC_API_KEY set in initExtra via agenix (see below)
};
age = {
identityPaths = [ "${config.home.homeDirectory}/.ssh/agenix" ];
secrets = {
juspay-anthropic-api-key.file = self + /secrets/juspay-anthropic-api-key.age;
};