christoph/flake-nixinator
1
Fork 0
Code Activity

Modules/Sops: Update secret definitions for nix-darwin

Browse Source
This commit is contained in:
Christoph Urlacher
2026-03-26 21:00:38 +01:00
parent 77f169fef4
commit 34f61d4f27
2 changed files with 15 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
system/systemmodules/sops-nix/default.nix
View File

@ -33,10 +33,16 @@ in {
secrets = let
mkSecret = name: {
${name} = {
owner = config.users.users.${username}.name;
group = config.users.users.${username}.group;
};
${name} = lib.mkMerge [
(lib.optionalAttrs pkgs.stdenv.isLinux {
owner = config.users.users.${username}.name;
group = config.users.users.${username}.group;
})
(lib.optionalAttrs pkgs.stdenv.isDarwin {
owner = config.users.users.${username}.name;
group = "staff"; # Apparently there's no way to get the primary group?
})
];
};
mkBootSecret = name: {