pkg/sops-nix
1
0
Fork 0
mirror of https://github.com/Mic92/sops-nix.git synced 2026-04-09 19:55:41 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

feat(darwin): add age key generation args option

Browse source
This commit is contained in:
Lucas Wagler 2026-04-08 12:56:27 -04:00 • committed by Lucas Wagler
parent 1721fd4324
commit 260872257c
2 changed files with 11 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
checks/darwin.nix
View file

@ -27,5 +27,6 @@
};
sops.defaultSopsFile = ../pkgs/sops-install-secrets/test-assets/secrets.yaml;
sops.age.generateKey = true;
sops.age.extraGenerateKeyArgs = [ "-pq" ];
system.stateVersion = 5;
}

11
modules/nix-darwin/default.nix
View file

@ -173,7 +173,7 @@ let
echo generating machine-specific age key...
mkdir -p "$(dirname ${escapedKeyFile})"
# age-keygen sets 0600 by default, no need to chmod.
${pkgs.age}/bin/age-keygen -o ${escapedKeyFile}
${pkgs.age}/bin/age-keygen -o ${escapedKeyFile} ${lib.join " " cfg.age.extraGenerateKeyArgs}
fi
''
else
@ -300,6 +300,15 @@ in
'';
};
extraGenerateKeyArgs = lib.mkOption {
type = lib.types.listOf lib.types.str;
default = [ ];
example = [ "-pq" ];
description = ''
List of arguments to use when generating the age key.
'';
};
sshKeyPaths = lib.mkOption {
type = lib.types.listOf lib.types.path;
default = defaultImportKeys "ed25519";