refactor: ponytail audit

modules/secrets/sops.nix

@@ -15,23 +15,18 @@ in
     sops.defaultSopsFile = ./secrets.yaml;
   };
 
-  flake.modules.nixos.sops-admin-key-file =
-    { lib, ... }:
-    let
-      adminKeyDir = builtins.dirOf sopsAdminKeyPath;
-    in
-    {
-      imports = [ nixosModules.sops ];
+  flake.modules.nixos.sops-admin-key-file = {
+    imports = [ nixosModules.sops ];
 
-      home-manager.sharedModules = [ hmModules.sops ];
+    home-manager.sharedModules = [ hmModules.sops ];
 
-      sops.age.keyFile = sopsAdminKeyPath;
+    sops.age.keyFile = sopsAdminKeyPath;
 
-      systemd.tmpfiles.rules = [
-        "d ${adminKeyDir} 0750 root wheel -"
-        "z ${sopsAdminKeyPath} 0640 root wheel -"
-      ];
-    };
+    systemd.tmpfiles.rules = [
+      "d ${builtins.dirOf sopsAdminKeyPath} 0750 root wheel -"
+      "z ${sopsAdminKeyPath} 0640 root wheel -"
+    ];
+  };
 
   flake.modules.nixos.sops-host-ssh-key = {
     imports = [ nixosModules.sops ];