Modules/Agenix: Change to system module

system/modules/agenix/default.nix

@@ -0,0 +1,33 @@
+{
+  config,
+  lib,
+  mylib,
+  pkgs,
+  username,
+  publicKeys,
+  ...
+}: let
+  inherit (config.modules) agenix;
+in {
+  options.modules.agenix = import ./options.nix {inherit lib mylib;};
+
+  config = {
+    # NOTE: See the generated secrets.nix file in home/christoph/default.nix
+
+    # Register generated secrets to the age system module
+    age.secrets = let
+      mkSecretIfExists = name:
+      # If this user has already encrypted the secret...
+        if builtins.pathExists ./${name}.age
+        # ...we will register it with age...
+        then {${name}.file = ./${name}.age;}
+        # ...otherwise we link to a bogus file.
+        else {${name}.file = ./void.age;};
+    in
+      lib.mkIf
+      # If this user defined any secrets...
+      (builtins.hasAttr "${username}" agenix.secrets)
+      # ...we will register all secrets files that have already been generated.
+      (lib.mkMerge (builtins.map mkSecretIfExists agenix.secrets.${username}));
+  };
+}

system/modules/agenix/heidi-discord-token.age

@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 PW+5DQ 2vardSYoPFvDEw4TiKSXntAJmChcVu9X+nD1+rCac1c
+mbx9xEy0vkQvl6HqLcFTk3qrsUpDAUuKD6GnJGa9elc
+--- vKkGWdp/anMV2VzwJEEHeWNUjv/SkzjYOIljRK6ExbI
+¹Ò¤Š�v®òLHôæl†|µ>ßïÇMcsoÏ{jÄSöÊÅ_à‰'—ÐŒÊWlÃ…£_iû
M°Y×âÏÐý�VVûŒsÛ,D%�-&+�½ì¡ißÖTçP"�g

system/modules/agenix/kopia-password.age

@@ -0,0 +1,6 @@
+age-encryption.org/v1
+-> ssh-ed25519 PW+5DQ Wm5RTSiZ/ndp6l6q2T43wrHiMnyP/FqDzUsl29TYoQc
+ti4Pc/+g+6618wOQAb+28bNt87A8f3gRFzCaMlNKpP4
+--- aRzLWmbnb7MqPVDSTYLqCIDHqaj0fu3JVp4ES93xZ9I
+B6Ï<ª
+I mjì–óñ½L‰¹N£í÷—-eØ![Ç'y_�aIë·

system/modules/agenix/kopia-server-password.age

@@ -0,0 +1,6 @@
+age-encryption.org/v1
+-> ssh-ed25519 PW+5DQ ZeBpvImtTWyKOxlCh573CNitT2z1OX2PgHAzLB/RTzg
+jx7n2REzbCJ9zr2TQHSvEz7lUZap5J2mjHNx710L49w
+--- kdRUEg3IOfjUfAgPEMj7MdiGftxVptPeC/Mbh5qWf8c
+Ν
+™Ò#N'ß(:aì©aá]µÿgüPo©ý¡í²[�¯=nÜ

system/modules/agenix/kopia-server-username.age

@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 PW+5DQ V2ejrKdFVeO7nNqkRqa3nSnz8MKlHyZcQ+T1NRfntSw
+t79YI5ZFtW0k6IZRB5VMjy7st+WlhONTFyVF/tvPaKk
+--- Cz4XV8J+oM6q6bVq6uXXUUvW/BqBL0agNzmobzcu2Kc
+á�{*$˜cøÐ̨&ZÅuthF¿ïþï¢[ÍTý%?ˆÙÞ?|*½`¾^OÉ

system/modules/agenix/options.nix

@@ -0,0 +1,22 @@
+{
+  lib,
+  mylib,
+  ...
+}: {
+  secrets = lib.mkOption {
+    type = lib.types.attrs;
+    description = "The secret files managed by agenix (and their associated keys)";
+    example = ''
+      {
+        christoph = [
+          "heidi-discord-token"
+          "kopia-password"
+          "kopia-server-username"
+          "kopia-server-password"
+        ];
+      }
+    '';
+
+    default = {};
+  };
+}

system/modules/agenix/void.age

@@ -0,0 +1 @@
+This secret has not been generated.

system/modules/default.nix

@@ -1,5 +1,6 @@
 {...}: {
   imports = [
+    ./agenix
     ./bootloader
     ./desktopportal
     ./docker

system/nixinator/default.nix

@@ -1,6 +1,7 @@
 {
   mylib,
   pkgs,
+  username,
   ...
 }: {
   imports = [
@@ -11,6 +12,8 @@
   ];
 
   modules = {
+    # agenix.secrets.${username} = [];
+
     network = {
       useNetworkManager = true;
 

system/servenix/default.nix

@@ -36,6 +36,13 @@
   ];
 
   modules = {
+    agenix.secrets.${username} = [
+      "heidi-discord-token"
+      "kopia-password"
+      "kopia-server-username"
+      "kopia-server-password"
+    ];
+
     network = {
       useNetworkManager = false;