Commit

modules/secrets/sops.nix

@@ -1,24 +1,29 @@
-{ inputs, ... }:
+{ inputs, den, ... }:
 {
-  den.default = {
-    nixos =
-      { pkgs, ... }:
+  den.default.includes = [
+    (
+      { host, ... }:
       {
-        imports = [ inputs.sops-nix.nixosModules.sops ];
+        nixos =
+          { pkgs, ... }:
+          {
+            imports = [ inputs.sops-nix.nixosModules.sops ];
+
+            sops = {
+              age.keyFile = "/home/${(builtins.head (builtins.attrValues host.users)).name}/.config/sops/age/keys.txt";
+              defaultSopsFile = ./secrets.yaml;
+              secrets = {
+                hashed-password-kiri.neededForUsers = true;
+              };
+            };
+
+            environment.systemPackages = with pkgs; [
+              sops
+              age
+            ];
 
-        sops = {
-          age.keyFile = "/home/kiri/.config/sops/age/keys.txt";
-          defaultSopsFile = ./secrets.yaml;
-          secrets = {
-            hashed-password-kiri.neededForUsers = true;
           };
-        };
-
-        environment.systemPackages = with pkgs; [
-          sops
-          age
-        ];
-
-      };
-  };
+      }
+    )
+  ];
 }