christoph/flake-nixinator
1
Fork 0
Code Activity

Modules/Sops: Update secret definitions for nix-darwin

Browse Source
This commit is contained in:
Christoph Urlacher
2026-03-26 21:00:38 +01:00
parent 77f169fef4
commit 34f61d4f27
2 changed files with 15 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
system/darwinix/default.nix
View File

@ -84,10 +84,13 @@
};
users.users.${username} = {
isHidden = false;
name = "${username}";
description = "Christoph";
home = "/Users/${username}";
uid = 501;
gid = 20;
createHome = false;
home = "/Users/${username}";
isHidden = false;
# NOTE: Not set if the user already exists on darwin, so use chsh for the root user
shell = pkgs.fish;

14
system/systemmodules/sops-nix/default.nix
View File

@ -33,10 +33,16 @@ in {
secrets = let
mkSecret = name: {
${name} = {
owner = config.users.users.${username}.name;
group = config.users.users.${username}.group;
};
${name} = lib.mkMerge [
(lib.optionalAttrs pkgs.stdenv.isLinux {
owner = config.users.users.${username}.name;
group = config.users.users.${username}.group;
})
(lib.optionalAttrs pkgs.stdenv.isDarwin {
owner = config.users.users.${username}.name;
group = "staff"; # Apparently there's no way to get the primary group?
})
];
};
mkBootSecret = name: {