pkg/sops-nix
1
0
Fork 0
mirror of https://github.com/Mic92/sops-nix.git synced 2026-05-15 01:41:19 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

home-manager: Include home.activation-script for linux similar to macos

Browse source
This commit is contained in:
Sebastian Sellmeier 2024-04-16 17:11:42 +02:00 • committed by mergify[bot]
parent cc535d07cb
commit dacc9519f5
2 changed files with 18 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

9
README.md
View file

@ -804,15 +804,6 @@ The secrets are decrypted in a systemd user service called `sops-nix`, so other
} }
``` ```
As home-manager does not restart the `sops-nix` unit automatically instruct home-manager to do so:
```nix
{
home.activation.setupEtc = config.lib.dag.entryAfter [ "writeBoundary" ] ''
/run/current-system/sw/bin/systemctl start --user sops-nix
'';
}
```
## Use with GPG instead of SSH keys ## Use with GPG instead of SSH keys
If you prefer having a separate GPG key, sops-nix also comes with a helper tool, `sops-init-gpg-key`: If you prefer having a separate GPG key, sops-nix also comes with a helper tool, `sops-init-gpg-key`:

22
modules/home-manager/sops.nix
View file

@ -256,15 +256,29 @@ in {
}; };
}; };
# darwin: [re]load secrets on home-manager activation # [re]load secrets on home-manager activation
home.activation = lib.mkIf pkgs.stdenv.hostPlatform.isDarwin { home.activation = let
sops-nix = let darwin = let
domain-target = "gui/$(id -u ${config.home.username})"; domain-target = "gui/$(id -u ${config.home.username})";
in '' in ''
/bin/launchctl bootout ${domain-target}/org.nix-community.home.sops-nix && true /bin/launchctl bootout ${domain-target}/org.nix-community.home.sops-nix && true
/bin/launchctl bootstrap ${domain-target} ${config.home.homeDirectory}/Library/LaunchAgents/org.nix-community.home.sops-nix.plist /bin/launchctl bootstrap ${domain-target} ${config.home.homeDirectory}/Library/LaunchAgents/org.nix-community.home.sops-nix.plist
''; '';
};
linux = let systemctl = config.systemd.user.systemctlPath; in ''
systemdStatus=$(${systemctl} --user is-system-running 2>&1 || true)
if [[ $systemdStatus == 'running' ]]; then
${config.systemd.user.systemctlPath} restart --user sops-nix
else
echo "User systemd daemon not running. Probably executed on boot where no manual start/reload is needed."
fi
unset systemdStatus
'';
in {
sops-nix = if pkgs.stdenv.isLinux then linux else darwin;
};
}; };
} }