From ffc9c2c78c46540e83e1d4516f7bd5e147859660 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= Date: Thu, 23 Jul 2020 08:34:52 +0100 Subject: [PATCH] module: add defaultSopsFormat option --- modules/sops/default.nix | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/modules/sops/default.nix b/modules/sops/default.nix index b339f19..718aebd 100644 --- a/modules/sops/default.nix +++ b/modules/sops/default.nix @@ -37,7 +37,7 @@ let }; format = mkOption { type = types.enum ["yaml" "json" "binary"]; - default = "yaml"; + default = cfg.defaultSopsFormat; description = '' File format used to decrypt the sops secret. Binary files are written to the target file as is. @@ -104,6 +104,14 @@ in { ''; }; + defaultSopsFormat = mkOption { + type = types.str; + default = "yaml"; + description = '' + Default sops format used for all secrets. + ''; + }; + validateSopsFiles = mkOption { type = types.bool; default = true;