about summary refs log tree commit diff stats
path: root/modules/system/secrets/default.nix
diff options
context:
space:
mode:
authorBenedikt Peetz <benedikt.peetz@b-peetz.de>2024-10-18 17:07:46 +0200
committerBenedikt Peetz <benedikt.peetz@b-peetz.de>2024-10-18 17:07:46 +0200
commitc52c7f314ccadcc2fcd91e28c8fd1b88f6d5ce0c (patch)
treee8b947710b467b32740598ff574982097836f66c /modules/system/secrets/default.nix
parentchore(pkgs/yt): 1.2.1 -> 1.3.0 (diff)
downloadnixos-config-c52c7f314ccadcc2fcd91e28c8fd1b88f6d5ce0c.tar.gz
nixos-config-c52c7f314ccadcc2fcd91e28c8fd1b88f6d5ce0c.zip
refactor(modules): Move all system modules to `by-name`
From now on all modules should be added to the new `by-name` directory.
This should help remove the (superficial and utterly useless)
distinction between `home-manager` and `NixOS` modules.
Diffstat (limited to 'modules/system/secrets/default.nix')
-rw-r--r--modules/system/secrets/default.nix73
1 files changed, 0 insertions, 73 deletions
diff --git a/modules/system/secrets/default.nix b/modules/system/secrets/default.nix
deleted file mode 100644
index 8b3188b0..00000000
--- a/modules/system/secrets/default.nix
+++ /dev/null
@@ -1,73 +0,0 @@
-{
-  config,
-  lib,
-  ...
-}: let
-  # mkFakeSecret = secretName: {
-  #   name = secretName;
-  #   value = {
-  #     path = "/dev/null";
-  #   };
-  # };
-  # fakeSecrets =
-  #   builtins.listToAttrs (lib.debug.traceValSeqN 2 (builtins.map mkFakeSecret
-  #       (lib.debug.traceValSeqN 2 (builtins.attrNames secrets))));
-  cfg = config.soispha.secrets;
-in {
-  options.soispha.secrets = {
-    enable = lib.mkEnableOption "secrets through agenix";
-  };
-
-  config = lib.mkIf cfg.enable {
-    age = {
-      secrets = {
-        lf_cd_paths = {
-          file = ./lf/cd_paths.age;
-          mode = "700";
-          owner = "soispha";
-          group = "users";
-        };
-
-        # FIXME: Reactive when serverphone is merged in tree again <2024-05-11>
-        #
-        # serverphoneCa = {
-        #   file = ./serverphone/ca.key;
-        #   mode = "700";
-        #   owner = "serverphone";
-        #   group = "serverphone";
-        # };
-        # serverphoneServer = {
-        #   file = ./serverphone/server.key;
-        #   mode = "700";
-        #   owner = "serverphone";
-        #   group = "serverphone";
-        # };
-
-        taskserverPrivate = {
-          file = ./taskserver/private.key;
-          mode = "700";
-          owner = "soispha";
-          group = "users";
-        };
-        taskserverPublic = {
-          file = ./taskserver/public.cert;
-          mode = "700";
-          owner = "soispha";
-          group = "users";
-        };
-        taskserverCA = {
-          file = ./taskserver/ca.cert;
-          mode = "700";
-          owner = "soispha";
-          group = "users";
-        };
-        taskserverCredentials = {
-          file = ./taskserver/credentials;
-          mode = "700";
-          owner = "soispha";
-          group = "users";
-        };
-      };
-    };
-  };
-}