christoph/flake-nixinator
1
Fork 0
Code Activity

Modules/Sops: Update secret definitions for nix-darwin

Browse Source
This commit is contained in:
Christoph Urlacher
2026-03-26 21:00:38 +01:00
parent 77f169fef4
commit 34f61d4f27
2 changed files with 15 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
system/darwinix/default.nix
View File

@ -84,10 +84,13 @@
}; };
users.users.${username} = { users.users.${username} = {
isHidden = false; name = "${username}";
description = "Christoph"; description = "Christoph";
home = "/Users/${username}"; uid = 501;
gid = 20;
createHome = false; createHome = false;
home = "/Users/${username}";
isHidden = false;
# NOTE: Not set if the user already exists on darwin, so use chsh for the root user # NOTE: Not set if the user already exists on darwin, so use chsh for the root user
shell = pkgs.fish; shell = pkgs.fish;

14
system/systemmodules/sops-nix/default.nix
View File

@ -33,10 +33,16 @@ in {
secrets = let secrets = let
mkSecret = name: { mkSecret = name: {
${name} = { ${name} = lib.mkMerge [
owner = config.users.users.${username}.name; (lib.optionalAttrs pkgs.stdenv.isLinux {
group = config.users.users.${username}.group; owner = config.users.users.${username}.name;
}; group = config.users.users.${username}.group;
})
(lib.optionalAttrs pkgs.stdenv.isDarwin {
owner = config.users.users.${username}.name;
group = "staff"; # Apparently there's no way to get the primary group?
})
];
}; };
mkBootSecret = name: { mkBootSecret = name: {